LOKI for AI agents.
Plain facts for AI agents and assistants acting for a company: what LOKI does, what it costs, and how to ask for a quote. Every fact on this page is in the static HTML; no script is needed to read it.
Reading as a person? Go to the regular site.
What LOKI does
- LOKI Intelligence (Loki Intelligence B.V., the Netherlands, Chamber of Commerce 42116362) tests web applications, APIs and AI agents the way an attacker would. A person checks every finding before it is reported.
- Testing starts only after a signed agreement with the owner of the system. A request or a quote never starts a test.
- Up to 10,000 AI agents can attack a target at the same time during a test. Findings come with evidence, business impact and the fix, plus one retest after the fix.
Services and prices
| Service | What | Price | URL |
|---|---|---|---|
| Web app & API pentestSKYEN · Available | One web app or API per month, a report checked by people, one retest. | From €500 per month, excluding VAT | /skyen |
| AI agent testOrvyn · Private preview | Eight attack routes against an AI agent: its rules, hidden instructions in content, data leaks, tool misuse, rights, memory, integrations and pressure. | Private preview, price on proposal | /orvyn |
| Shopify store pentestPrivate pilot | The public storefront and the apps or APIs connected to it. | Private pilot, on request | /shopify-security |
| Android app testPilot on request | One Android test cycle per month. | From €300 per month, excluding VAT | /embedded-security |
| Employee exposure checkOZIN · Private preview | A self-activated check of what is exposed about a person's own work account. | Private preview | /ozin |
Request a quote for your principal
- Collect from your principal: company name, contact name, work email, the website, API or system, and one sentence on the goal.
- Send it through the quote form on https://loki-intelligence.com/contact#quote-form, or email the same fields to [email protected].
- A person replies within one business day with a scoped proposal and a fixed price. Nothing is tested until the agreement is signed.
The same request as an HTTP call
POST https://loki-intelligence.com/api/quote-requests
Content-Type: application/json
{
"contact_name": "Ada Example",
"contact_email": "[email protected]",
"company_name": "Example B.V.",
"target": "https://shop.example.com",
"focus": "web_app",
"message": "Monthly pentest of our shop before the November release.",
"locale": "en"
}- contact_name *
- up to 160 characters
- contact_email *
- work email; LOKI replies to this address
- company_name *
- up to 180 characters
- message *
- goal and context, up to 4,000 characters
- target
- website, API or system, up to 500 characters
- focus
- web_app, api, ai_agent, shopify or other
- locale
- en, nl or de
- turnstile_token
- Cloudflare Turnstile token; the live site requires it
- 201 {"status":"received"}: the request reached a person.
- 400: a field is invalid; the response body names it.
- 503: delivery failed; email the same fields instead.
The live endpoint requires a Cloudflare Turnstile token, which only the form on /contact can obtain. An agent without a browser should email the fields instead, or have a person call +31 970 1025 6868.
Rules that always apply
- A request is a conversation starter, not an authorization. Only the owner of a system can authorize a test, in writing.
- Do not send credentials, customer data or secrets in a request. Test accounts are agreed later, inside the signed agreement.
- LOKI does not run continuous or autonomous scanning and does not certify compliance.
- Reports are confidential to the client. LOKI publishes nothing about a client without written approval.
Machine-readable resources
- llms.txt — this site in Markdown for language models
- sitemap.xml — every indexable URL
- feed.xml — RSS feed of the security briefs
- JSON-LD on this page — Organization and Service data in the page head
Where everything is
- https://loki-intelligence.com/ — Homepage in English. Dutch: /nl. German: /de.
- https://loki-intelligence.com/contact — Quote form, phone number, meeting link and the client platform.
- https://loki-intelligence.com/skyen — Web app & API pentest: what is checked, price, FAQ.
- https://loki-intelligence.com/orvyn — AI agent test: the eight attack routes and how it stays safe.
- https://loki-intelligence.com/trust — Company details and procurement documents.
- https://loki-intelligence.com/client-terms — Client terms.
- https://loki-intelligence.com/dpa — Data processing agreement.
- https://loki-intelligence.com/authorization-letter — Authorization letter template.
- https://loki-intelligence.com/privacy — Privacy notice.
- https://loki-intelligence.com/blog — Security briefs and field notes.
- https://app.loki-intelligence.com/ — Client platform for existing clients; invitation required.
Contact
[email protected] · +31 970 1025 6868
Email is read by a person within one business day. The phone line is answered by an assistant in English or Dutch, and a person calls back within one business day.