# Escape AI-powered discovery, application testing, and pentesting for security teams - Findings24: - Site: - Preços: Freemium - Categorias: Assistentes de testes com IA ## O que é Escape? Escape is an offensive security platform that combines attack surface management (ASM), dynamic application security testing (DAST), and AI pentesting. It helps application security teams discover assets, test application behavior, validate exploitable vulnerabilities, and send remediation guidance to engineers. The platform focuses on modern web applications and APIs, including authenticated workflows and business logic. It connects discovery, testing, remediation, and reporting into a continuous security program that teams can integrate with their development processes. ## O que Escape pode fazer? ### Application and API discovery Discovers internal and external APIs, single-page applications, and infrastructure exposure. Findings include asset context and can be routed to owning teams or sent to Wiz. ### Business logic testing Tests workflows, access controls, and multi-step processes for issues such as broken object-level authorization, IDORs, authentication bypass, and pricing logic flaws. ### Authenticated assessments Supports authenticated testing with OAuth, SAML, TLS, and TOTP MFA, alongside multi-tenant application testing. ### AI pentesting with exploit evidence Uses graph context and agentic attack reasoning to investigate multi-step attack chains. Screenshots, execution logs, and validated attack paths document exploitability. ### Developer remediation guidance Provides reproduction details and code suggestions tailored to source code and frameworks such as React, Django, and Spring Boot. Integrations with Cursor, Claude Code, and Gemini support remediation workflows. ### Programmable security workflows Offers a public API, CLI, and MCP server. Teams can trigger scans in CI/CD, configure security gates, and automate finding triage, routing, and escalation through event-based workflows. ## Casos de uso ### Check releases during development Application security teams can test each deployment for authorization and workflow vulnerabilities, keeping security assessments aligned with frequent engineering releases. ### Prevent previously discovered flaws from recurring Teams can import findings from earlier pentests and bug bounty programs, then convert them into automated regression tests that run with DAST on subsequent builds. ### Assess internal applications Organizations can use cloud and on-premises hybrid deployments to assess private applications while controlling access to their infrastructure. ### Document security coverage for leadership and audits Security leaders can track coverage and remediation metrics, while audit teams receive reports with testing evidence for supported frameworks, including PCI-DSS, SOC 2, ISO 27001, and HIPAA. ## Perguntas frequentes ### How is Escape priced? Pricing is scoped to the organization's environment and attack surface. Escape asks prospective customers to book a demo and discuss their requirements for a quote. ### Can Escape be purchased through an existing procurement agreement? Escape is available through AWS Marketplace and works with more than 20 channel partners worldwide, allowing customers to purchase through participating resellers. ### Can teams customize testing and manage access? Teams can create custom scanning rules and configure team-level access and permissions so findings reach the people responsible for the affected applications. ### Does Escape support AI application surfaces? Escape lists MCP servers, LLM integrations, and agentic endpoints within its testing scope, alongside other application surfaces. ## Informações rápidas - **Product category**: Offensive security platform - **Core products**: Attack Surface Management, DAST, AI Pentesting - **Primary users**: Application security teams, security engineers, and CISOs - **Deployment options**: Cloud and on-premises hybrid deployments - **Website**: https://escape.tech