Assign systems
Public certificate, archive and DNS records reveal possible targets. Verify additional domains using DNS TXT records and add missing hostnames to build the proposed scope.
24x7 Breach Simulation
Find attack paths. Check changes. Understand the risk.
BAS uses repeatable attack scenarios to validate security controls. Pwnry focuses on your public websites, APIs and services. Get a verified scope, automated testing cycles and expert assessment of the results.
No credit cardAgree the scope before engagement
AI inference exclusively in Nuremberg.
An outside viewILLUSTRATIVE EXAMPLE
Discover hostnamesAssign systemsUnderstand the testing scope
Your last pentest is a snapshot.
Then comes the next API. The next release. The subdomain nobody had on their list.
Recurring security validation connects those changes with concrete checks. Which systems belong to the company? Which attack paths can be confirmed? What has been fixed and needs a retest? Pwnry keeps that work in one place.
How external pentests complement simulationFrom attack surface to a finding you can verify.
Validate attack paths
With your authorization, bounded automated checks look for possible subdomain takeovers, XSS and open redirects. A signal remains clearly distinct from a confirmed security finding.
Remediate and retest
Expert assessment and prioritized reports give your team a concrete backlog. New confirmed findings trigger email and optional browser notifications. Retesting is agreed as part of the service.
BAS, attack surface management and pentesting: which does what?
| Capability | The question it answers |
|---|---|
| External Attack Surface Management | Which publicly visible systems and dependencies belong to your company? |
| Breach and Attack Simulation | Do defined security controls hold up against repeatable attack scenarios? |
| External penetration tests | Which vulnerabilities and impacts emerge from the agreed expert examination of your applications? |
Pwnry combines external discovery, explicitly authorized automated checks and recurring penetration tests. Internal networks, additional access and specialized scenarios require a separate agreement.
AI penetration testing. Inference in Nuremberg.
A pentest can expose customer records, internal processes or credentials. Pwnry uses model inference exclusively in Nuremberg for AI-assisted analysis. Your findings are processed at a clearly identified location for that analysis.
You receive findings and concrete remediation steps. We operate the AI tools behind the scenes.
The AI technology behind Pwnry- Nuremberg is our inference location.
- The AI models used by Pwnry run exclusively in Nuremberg. This location commitment specifically covers Pwnry’s AI inference.
- Security models for real testing questions.
- 2342.ai provides the underlying AI technology. Specialized models support our pentesters with technical test cases and analysis. Experts assess the evidence, impact and priority of each finding.
- A clear data path for your privacy requirements.
- Before engagement, you know where AI processes your findings, who has access and how long data is retained. Contractual data protection terms are aligned with the engagement.
Good questions.
Clear answers.
What you should know before your first check.
What is breach and attack simulation (BAS)?+
BAS uses repeatable, automated attack scenarios to validate security controls. Pwnry focuses on your external attack surface: public websites, APIs and services within your verified scope.
What does 24x7 mean at Pwnry?+
24x7 describes the automated operation of the platform and processing of new findings. Full testing cycles run daily, weekly or monthly according to your agreement. Testing frequency, expert support and response times are agreed before engagement.
Does breach simulation replace a full penetration test?+
Automation covers repeatable checks. A full penetration test adds expert investigation, including agreed business-logic and authenticated testing, impact assessment and retests. A defined scope connects the two.
Does the free check include ongoing breach simulation?+
The free check is a bounded discovery assessment. Additional automated subdomain-takeover, XSS and open-redirect checks require explicit authorization. Free results are reused for up to 30 days. Recurring testing requires an active engagement.
What do recurring external penetration tests cost?+
Starting prices are €1,999 for monthly, €5,999 for weekly and €9,999 for daily testing, all net per month. Application groups, access requirements and scope determine the final quote. The free estimate does not place an order.
Which systems are included in the testing scope?+
All confirmed, reachable company systems enter the proposed scope. Verify additional domains using DNS TXT records and add missing hostnames. Requested exceptions are saved and discussed before the final offer.
Where does AI analysis of my findings take place?+
Pwnry uses model inference exclusively in Nuremberg for AI-assisted analysis. 2342.ai provides the technology. The general 2342.ai catalog includes other data paths; Pwnry follows its own Nuremberg-only inference policy.
What does inference in Nuremberg mean for data protection?+
Pwnry’s AI processing location is explicit: Nuremberg. Access rights, retention and contractual data protection terms are also defined for the engagement. The location commitment covers AI inference; public DNS queries, email delivery and other processing steps are considered separately.
Start with your own attack surface.
Verify your company email. See your systems. Agree the right testing frequency.
Start your free check
Company email or DNS verification. No credit card.