Get hacked. On your terms.
A pentest every month. From €500.
Clients & partners
Programmes & competitions
Up to 10,000 AI agents attack your app at the same time. Then a person checks every finding.
Choose what you need to secure.
Two main services and three pilots on request. Each starts with an agreed scope and ends with evidence your team can act on.
Web app & API pentest SKYEN
Every month we hack your web app or API and you get a report with the real risks and the fix. From €500 per month, excluding VAT.
See the pentestAI agent test Orvyn · private preview
We try to make your AI agent do what it must not: ignore its rules, leak data, take the wrong action. You see where it can be pushed too far.
See the agent test-
Private pilot
Shopify store
A pentest of your Shopify store and the apps or APIs connected to it. Private pilot, on request.
See the Shopify test -
Private preview
Employee exposure
Lets employees see for themselves what is exposed about their work account online. Nothing runs unless they start it.
See the exposure check -
Pilot · from €300/month
Android app
One test of your Android app per month, from €300 excluding VAT. Pilot on request.
See the Android test
Questions and facts
What is LOKI Intelligence?
Loki Intelligence B.V. is a Dutch company (Chamber of Commerce 42116362) that tests web applications, APIs and AI agents the way an attacker would. A person checks every finding before it is reported.
What does a LOKI pentest cost?
A pentest of one web application or API starts at €500 per month excluding VAT, with a report checked by people and one retest. Larger scopes get a fixed written quote.
What do I receive?
Each finding comes with reproducible evidence, the business impact and the fix, plus one scoped retest to confirm the fix works.
When does a test start?
Only after a fully executed agreement that names the targets, exclusions, rules of engagement, test window and stop contact. A request or a quote never starts a test.
What does LOKI not do?
LOKI does not certify compliance, does not claim to find every weakness, and does not run autonomous or continuous scanning.












