Kosuke Pentest

Kosuke Pentest is an advanced web application penetration testing service that combines AI-driven scanning with human expert validation. It allows users to request an authorized pentest quickly by providing a work email and company URL. After a short setup, the AI agent tests the web app, and within 2-3 days, users receive free severity counts (critical, high, medium). The full report, containing vulnerability details, proof of concept, CVSS 4.0 scores, CWE tags, and fix instructions, is available for a fee. This model ensures transparency and eliminates surprise costs. Performance-wise, Kosuke Pentest ranks at the top of the xbow public web-CTF leaderboard, surpassing frontier labs' self-reported scores. This state-of-the-art capability is paired with mandatory human review: a senior pentester signs off on every finding, ensuring accuracy and reducing false positives. The platform is designed to deliver reliable, compliance-ready evidence (e.g., for SOC 2) without the delays of traditional consulting engagements. Pricing is per-vulnerability and capped based on company revenue, making it accessible to startups and enterprises alike. Small organizations pay at most €1,000, medium-sized €3,000, and large €5,000 per engagement, with low and informational findings always free. The entire process is self-service, requiring no procurement or quarterly wait times, and users only pay if they choose to see the details of the vulnerabilities found.

Category: AI/ML
Pricing: Free

Problem solved

Many organizations lack the time, budget, or expertise for traditional penetration testing, leaving critical web application vulnerabilities undiscovered. Kosuke Pentest automates the discovery process with AI, verified by human experts, and provides a free initial assessment showing vulnerability counts. This allows teams to quickly gauge their security posture and only invest in detailed remediation reports when necessary, eliminating the barrier of upfront costs and complex procurement.

Use cases

Quickly assess a web application's security posture before a product launch
Obtain SOC 2 CC7.x evidence for compliance audits
Identify and fix critical vulnerabilities in a startup's MVP to prevent breaches
Compare security findings with results from bug bounty programs or internal scans
Get an affordable, one-time pentest for a small business without a dedicated security team

Audience

Developers
Startups
Enterprise
Product Managers

Pros

Free initial pentest with severity counts
Transparent per-vulnerability pricing with caps
Human expert validation ensures accuracy
State-of-the-art AI performance, topping CTF benchmarks
Fast, self-service setup with no procurement delays

Cons

Full report details are paid
Limited to web applications (no API or network testing mentioned)
Findings may require interpretation for non-technical stakeholders
Cost can accumulate for many critical findings despite caps
Dependence on AI model before human review

Official website: https://kosuke.ai/pentest

Canonical LambdaBase page: https://www.lambdabase.com/tools/kosuke-pentest

← Directory

Kosuke Pentest

Free

★ 18 • Updated Jul 18, 2026, 03:16 AM

Kosuke Pentest is an advanced web application penetration testing service that combines AI-driven scanning with human expert validation.

Use Cases ▼

Quickly assess a web application's security posture before a product launch

Obtain SOC 2 CC7.x evidence for compliance audits

Identify and fix critical vulnerabilities in a startup's MVP to prevent breaches

Compare security findings with results from bug bounty programs or internal scans

Get an affordable, one-time pentest for a small business without a dedicated security team

What Problem It Solves ▼

Key Features ▼

✓

Free initial pentest with severity counts

✓

Transparent per-vulnerability pricing with caps

✓

Human expert validation ensures accuracy

✓

State-of-the-art AI performance, topping CTF benchmarks

✓

Fast, self-service setup with no procurement delays

Overview

Full Description ▼

Performance-wise, Kosuke Pentest ranks at the top of the xbow public web-CTF leaderboard, surpassing frontier labs' self-reported scores. This state-of-the-art capability is paired with mandatory human review: a senior pentester signs off on every finding, ensuring accuracy and reducing false positives. The platform is designed to deliver reliable, compliance-ready evidence (e.g., for SOC 2) without the delays of traditional consulting engagements.

Pricing is per-vulnerability and capped based on company revenue, making it accessible to startups and enterprises alike. Small organizations pay at most €1,000, medium-sized €3,000, and large €5,000 per engagement, with low and informational findings always free. The entire process is self-service, requiring no procurement or quarterly wait times, and users only pay if they choose to see the details of the vulnerabilities found.