Name the objective.
An autonomous adversary goes after it.
What happens
when you run it
You deploy it as one container inside your own network, and you name an objective in plain English.
- AUTOATTACK SYSTEM CHECK
- DEPLOY UNIT ................ 1 CONTAINER
- CREDENTIALS ........... NONE / BLACK BOX
- OBJECTIVE ................. USER DEFINED
- CLOCK ................. STARTS ON DEPLOY
- ALL SYSTEMS GO
Every line is a real deployment fact: one container, no credentials, an objective you write, and a clock that starts on deploy.
One command. The adversary phones home and the clock starts.
One foothold becomes the next, machine to machine, toward the objective you set.
Each move is backed by evidence you can verify.
Versus
Two published matchups on a GOAD lab, scored on time to Domain Admin. AutoAttack started every run with no credentials.
All three Domain Admins in 45 seconds.
A black-box GOAD lab: two forests, three domains, five Windows hosts. Neither tool was given credentials.
| Metric | Nessus Professional | AutoAttack |
|---|---|---|
| Run time | 24m 04s | 2m 37s |
| First Domain Admin | not reached | 0:41 K.O. |
| Domains compromised | 0 of 3 | 3 of 3 Perfect |
| Credentials recovered | 0 | 124 |
| Confirmed compromise | none | 3 Domain Admin |
Black-box comparison: neither tool was given credentials. Same GOAD vanilla snapshot, same network position, 2026-06-24.
Ten runs on hardened GOAD: 51-second median.
Time to all three Domain Admins on the hardened spec NodeZero published: two forests, three domains, five Windows hosts.
| Metric | NodeZero | AutoAttack |
|---|---|---|
| Time to 3/3 Domain Admin | 14m 00s | 0:51 About 16× faster |
| Domains reached | 3 of 3 | 3 of 3 |
| Independent runs | 1 published | 10 |
Same hardened GOAD spec NodeZero published: Windows Defender enabled, LLMNR disabled, Windows patched through March 2026. AutoAttack: median of 10 independent runs, fresh rollback each time, range 0:28 to 1:01. NodeZero published its 14:00 result in August 2025. AutoAttack reaches the same objective about 16× faster.
Move list
What comes back is one report: the whole attack path it built, hop by hop, evidence attached. No severity levels, no CVSS, no separate findings list.
It works across your estate — Active Directory, cloud, SaaS, endpoints, Linux, data stores — chaining between them in a single run.
It is not an exposure-inventory tool: every finding is a confirmed compromise, reached and proven. The four hits above are the shape a chain takes, not one run. A measured run's own steps and times are in the benchmark tables.
Reach
Select your objective
Four that visitors pick most, and one slot that takes anything you can say in plain English.
Every slot runs the same product: no plans, no tiers, no feature gating. Identity, network, applications and data, on every reachable host.
Per discovered host
Priced per discovered host, billed annually. No plans, no tiers, no feature gating: one product, a graduated rate.
| Hosts | Rate$ / host / yr |
|---|---|
| 1–100 | $49 |
| 101–500 | $34 |
| 501–2,500 | $19 |
| 2,501–10,000 | $9 |
| 10,001+ | Enterprise, contact sales |
- Unlimited campaigns and agents
- Every reachable host attacked, no asset cap
- Identity, network, applications and data
- The evidence behind every step
- One report per campaign, the whole causal chain on one page
Deploy and run a complete campaign at no cost, and read the whole run: every step it took. Subscribing reveals the target names, the captured proof and the fix, and the host count you discovered sets the price.
Billing is annual and auto-renews at the then-current rate. Host count is unique hosts discovered during your billing period, and increases are prorated. Seven days grace on a failed payment before the account goes read-only. Cancel anytime from the Stripe portal, and your campaigns and their reports stay accessible.
Challenge round
Every finding is a confirmed compromise, reached and proven.
Every reachable host attacked.
AutoAttack was given no credentials in either published benchmark.
Campaigns are unlimited, so deploy again and read what the new run reached.
The whole run is yours to read for nothing. You pay to reveal the target names, the proof and the fix, and the host count you discovered sets the price.
State your objective.
Deploy and run a complete campaign at no cost, and read the whole run: every step it took. Subscribing reveals the target names, the captured proof and the fix, and the host count you discovered sets the price.
Press Enter to run · an adversary on demand