Continuous asset discovery and mapping
Maps internal, external, cloud, and third-party exposure, including unknown assets such as subdomains and APIs; the platform describes its map as continuously updated.
Ethiack
Freemium
Continuous AI-assisted penetration testing and exposure validation for security teams.
Ethiackとは？
Ethiack is an offensive security platform for continuous attack-surface testing and exposure validation. Its Hackian agentic AI engine maps assets, runs attack scenarios, and attempts to exploit vulnerabilities so teams can distinguish confirmed, actionable risks from unvalidated scanner findings. Confirmed issues include proof-of-exploit and remediation guidance. The platform also supports on-demand penetration tests, ongoing testing, risk-based vulnerability management, and compliance reporting mapped to named frameworks.
Ethiackでできること
Automated attack simulation
Hackian executes attack scenarios and can chain attack paths, with testing described as continuous and event-driven around code pushes, infrastructure changes, or new knowledge.
Exploit validation with evidence
Attempts exploitation to validate findings and provides proof-of-exploit for confirmed risks, helping teams assess which vulnerabilities are actionable.
Risk prioritization and remediation guidance
Presents validated risks with impact and mitigation steps so teams can decide what to address first rather than relying only on generic severity scores.
Compliance reporting
Generates audit-oriented reports and maps validated risks to frameworks including NIS2, DORA, ISO 27001, SOC 2, and PCI DSS.
On-demand and continuous testing options
Offers on-demand web application and API pentesting, as well as continuous platform testing; the pricing page describes reports, retesting, and security testing across assets.
利用シーン
“Maintain visibility of internet-facing exposure”
Security teams can use continuous discovery to identify known and previously unknown external assets, including subdomains, APIs, and third-party exposure, then review the evolving attack-surface map.
“Triage vulnerability findings”
Teams with a large volume of scanner alerts can use exploitation validation and proof to focus investigation and remediation on confirmed risks.
“Validate releases and infrastructure changes”
Organizations can trigger testing around code pushes or infrastructure changes to check for exploitable exposure as their environment changes.
“Prepare evidence for audits and oversight”
Compliance and security teams can generate reports on demand and use vulnerability evidence mapped to frameworks such as ISO 27001, SOC 2, PCI DSS, NIS2, and DORA.
“Commission a focused application pentest”
Organizations needing a time-bounded assessment can request an on-demand web application or API penetration test with a compliance-oriented report and retesting.
よくある質問
What does Ethiack test?
The platform describes testing across internal, external, cloud, and third-party assets. The on-demand pentest offer specifically lists web applications and APIs; broader coverage depends on the selected plan.
How does Ethiack distinguish actionable findings?
Hackian attempts exploitation and supplies proof-of-exploit for confirmed risks, alongside prioritization and remediation guidance.
Can testing be continuous or event-driven?
Yes. Ethiack describes continuous testing and event-driven testing associated with code pushes, infrastructure changes, or new knowledge, in addition to on-demand pentests.
Which compliance frameworks are covered in reports?
The site lists NIS2, DORA, ISO 27001, SOC 2, and PCI DSS as frameworks for mapping validated risks and generating compliance-oriented reports.
What does the on-demand pentest include?
The pricing page lists AI and ethical-hacker testing, web application and API testing, black- or grey-box testing, an audit-ready report, remediation advice, and unlimited retesting.
クイック情報
- Product category
- Offensive security and continuous exposure management platform
- AI engine
- Hackian agentic AI pentesting engine
- Testing modes
- On-demand penetration testing and continuous security testing
- Finding evidence
- Proof-of-exploit for confirmed risks
- Reporting frameworks
- NIS2, DORA, ISO 27001, SOC 2, and PCI DSS
- Website
- ethiack.com
Ethiack のトラフィック分析
トラフィックデータは参考情報としてご利用ください。
- ドメイン評価
- 54
Ethiackの代替品
Sauce Labs
saucelabs.com
Sauce Labsは、Web・モバイルアプリ向けの継続的テストクラウドで、ブラウザ、デバイス、ビジュアル、AI支援テストに対応します。
Replay QA
www.replay.io
Replay QA is an agentic web application testing platform with an automated Security Scan for penetration testing. It explores live apps, tests authenticated journeys, captures runtime evidence, and produces reports that teams can use to remediate security and other software defects.
Escape
escape.tech
AI-powered discovery, application testing, and pentesting for security teams
Testim
testim.io
Record application flows, add checks and run end-to-end tests. Testim combines AI-assisted element locators with visual test editing and team workflows for web, mobile and Salesforce testing.
Reflect
reflect.run
Web・モバイル・APIに対応するノーコードAIテスト。
Qodex
qodex.ai
プルリクエストとデプロイで実シナリオを実行する継続的テスト基盤