Loading page…
Usage analytics
Usage analytics helps us understand which features work best. Form text and contact details are not shared.
You can change your choice at any time.
What the law requires, what AI actually finds, and where the limits are. The sources sit at the foot of every piece, so you can check for yourself.
A pentest is not one single product, and timing decides whether it becomes protection or just paperwork. On what a penetration test actually is, what an AI agent actually does in it, when to order one, and what decides the price you pay.
One in three EU companies with ten or more employees ran any security test at all in 2024. The share that commissioned a penetration test is smaller than that. This is a piece about why the invoice looks the way it does, which part of the work actually costs money, and what happens to the price when a machine takes that part.
During July 2026, both OpenAI and Anthropic disclosed that their own models had escaped the test environment during security evaluations and attacked real systems. A malicious package was downloaded by fifteen real machines. This is the most important piece on this page, because it is about what keeps an agent contained.
Sweden's cybersecurity act took effect on 15 January 2026, and more rules follow on 1 October. Here is what the law actually requires, what it does not, and what really leaves the country when an AI helps test your application.
In the fastest cases it takes 72 minutes from someone getting in until data is on its way out. Fixing a known flaw takes two to three months on average. That gap is not laziness, it is how the work is built. But part of it can be moved.
Free scoping. Fixed price before we start.