auto/attack

Name the objective.

The adversary reaches it and proves it.

Against Nessus Professional.

A black-box run: neither tool was given credentials.

See the full benchmark
Black-box
Nessus Professional
exposure inventory
AutoAttack
autonomous adversary
Run time24m 04s2m 37s
First Domain Adminnot reached0:41
Domains compromised0 of 33 of 3
Credentials recovered0124
Confirmed compromisenone3 Domain Admin

Black-box comparison: neither tool was given credentials. Same GOAD vanilla snapshot, same network position, 2026-06-24.

How it works.

Deploy in minutes

One command. The adversary phones home and starts.

It chains to your goal

An autonomous adversary turns one foothold into the next, working toward the objective you set.

Every step is proven

Each move is backed by evidence you can verify.

  1. Web app
  2. Host
  3. Network
  4. Domain Admin

What it reaches.

Domain Admin across your Active Directory forests.
Sensitive data at rest and in motion.
Executive inboxes and the messages inside.

Against NodeZero.

On the hardened spec NodeZero published.

Hardened
NodeZero
automated pentest
AutoAttack
autonomous adversary
Time to 3/3 Domain Admin14m 00s0:51
Domains reached3 of 33 of 3
Independent runs1 published10

Same hardened GOAD spec NodeZero published: Windows Defender enabled, LLMNR disabled, Windows patched through March 2026. AutoAttack: median of 10 independent runs, fresh rollback each time, range 0:28 to 1:01. NodeZero published its 14:00 result in August 2025. AutoAttack reaches the same objective about 16× faster.

Self-serve pricing.

$49–$9
per host, per year (graduated as you scale)

Deploy and run a complete campaign at no cost. Findings stay redacted until you subscribe; your discovered host count sets the price.

See pricing

State your objective.