Agthy

AI cybersecurity analysis and penetration test preparation

Agthy is an AI cybersecurity analysis tool where a team of specialists reviews what is publicly known about a target: a security engineer maps the exposed attack surface and known vulnerabilities, a software engineer checks the public code and advisories of the technologies in use, and a legal adviser lists the rules to follow. A supervisor turns their reports into one prioritised assessment and a pen test checklist.

Start a job
Example job

Review the public security posture of our web shop (shop.example.com, built with a popular PHP framework and a hosted payment widget): exposed information, known vulnerabilities for our stack, and a checklist to scope a penetration test.

Team

  • Security Engineer

    Passive reconnaissance from public sources only: exposed information, technologies in use, public breach reports and the attack surface they suggest. Informational only.

  • Software Engineer

    Reads public code, release notes and security advisories of the frameworks and libraries in use to find known vulnerabilities and fixed versions.

  • Legal Adviser

    Lists the rules around testing and incidents: authorisation for a penetration test, disclosure and the data protection and security duties that apply, such as the GDPR and NIS2.

The supervisor

The supervisor cross-checks the reports, drops findings that are not backed by a public source, ranks the risks and writes one assessment with a scoped pen test checklist and next steps.

How the job goes

  1. 01

    Describe what to review

    Name the site, product or technology stack you own or are authorised to assess, and what worries you.

  2. 02

    Specialists research in parallel

    They search and read public sources, advisories and documentation at the same time, and you see each step.

  3. 03

    Get a prioritised assessment

    Download the report as Markdown, PDF or JSON, and take the checklist to your pen testers or ask for more detail.

Why use a team

  • Attack surface, known vulnerabilities and legal duties in one report
  • A clear pen test scope and checklist, so testers start faster
  • Every finding points to a public source you can verify
  • Free to start, with results as MD, PDF or JSON

Frequently asked questions

Is this a penetration test?

No. The agents work passively from public sources and do not scan, probe or attack your systems. It is an informational assessment and a good way to prepare and scope a real penetration test by an authorised professional.

Can I analyse any website?

Only assess systems you own or have written permission to review. The agents use public information only, but the report is meant for defensive use: improving your own security.

What does the report include?

The technologies and public exposure found, known vulnerabilities with the fixed versions, the legal and compliance points to keep in mind, a ranked list of risks and a pen test checklist. Verify important findings before acting on them.

Try this job with your own team.

Open the console