An adversary you deploy.
A path it proves.
AutoAttack is autonomous penetration-testing software. You name an objective in plain English: Domain Admin, a sensitive inbox, a customer database. An AI adversary goes after it inside your own network and proves every step it takes.
Deployhow it arrives
one command One container, started by one docker command on any Linux host that can reach the network you want tested.
nothing installed No agent on any host. No directory it depends on. Nothing to integrate first: it takes the estate as it stands, whatever mix of operating systems is in it.
gone after The container lives for the engagement and is destroyed when it ends. Nothing is written to your hosts’ disks.
what comes back
one account The report is one account of the run, from the first foothold to the objective, with the captured evidence behind every step. How the report reads
every line happened Each line is a hop: one moment the adversary gained something it did not have before. Probes and failed attempts are not hops.
no severity There is no severity level and no CVSS score on it.
no second list There is no ranked findings list to reconcile. A weakness the adversary never used to get anywhere is not on the page. Why the report holds only the steps that mattered
what to fix A proven path orders the work by attack sequence: each step names the weakness it exploited and carries the fix beside it, so you close the route in the order the adversary walked it.
what it will not do
no maybes If it cannot prove something, it is not reported at all.
no lockouts Credential attempts are throttled to your domain’s real lockout policy. The rest of the ground rules
no changes No service installs. No policy changes. No payload that trips antivirus.
no waiting Stop a running campaign from your dashboard whenever you want.
getting in touch
sales Sizing, enterprise pricing, or a question the site does not answer: hello@autoattack.ai.
disclosure A security issue in AutoAttack itself: security@autoattack.ai.
everything else Every address, and which one answers what, is on the contact page.