Skip to main content

Get hacked. On your terms.

A pentest every month. From €500.

Up to 10,000 AI agents attack your app at the same time. Then a person checks every finding.

Choose what you need to secure.

Two main services and three pilots on request. Each starts with an agreed scope and ends with evidence your team can act on.

Web app & API pentest SKYEN

Every month we hack your web app or API and you get a report with the real risks and the fix. From €500 per month, excluding VAT.

See the pentest

AI agent test Orvyn · private preview

We try to make your AI agent do what it must not: ignore its rules, leak data, take the wrong action. You see where it can be pushed too far.

See the agent test
  • Private pilot

    Shopify store

    A pentest of your Shopify store and the apps or APIs connected to it. Private pilot, on request.

    See the Shopify test
  • Private preview

    Employee exposure

    Lets employees see for themselves what is exposed about their work account online. Nothing runs unless they start it.

    See the exposure check
  • Pilot · from €300/month

    Android app

    One test of your Android app per month, from €300 excluding VAT. Pilot on request.

    See the Android test

Questions and facts

What is LOKI Intelligence?

Loki Intelligence B.V. is a Dutch company (Chamber of Commerce 42116362) that tests web applications, APIs and AI agents the way an attacker would. A person checks every finding before it is reported.

What does a LOKI pentest cost?

A pentest of one web application or API starts at €500 per month excluding VAT, with a report checked by people and one retest. Larger scopes get a fixed written quote.

What do I receive?

Each finding comes with reproducible evidence, the business impact and the fix, plus one scoped retest to confirm the fix works.

When does a test start?

Only after a fully executed agreement that names the targets, exclusions, rules of engagement, test window and stop contact. A request or a quote never starts a test.

What does LOKI not do?

LOKI does not certify compliance, does not claim to find every weakness, and does not run autonomous or continuous scanning.