Security score
87/100
Strong
↑ +4 since last
acme/platform · main
Static
44/50
AI
43/50
Automated security analysis
Audit your SaaS,
from code
to the live web app.
Connect your GitHub repository with read-only access. PentestLouis analyzes code, dependencies, secrets, and the live web surface, then prioritizes risks in a clear report.
AI attack budget — you decide
Advanced— A deeper exploration of several sensitive user flows.
We request access to your repositories so we can read and analyze them. The application never writes to your code.
AI attack resistance
€2,000
VERIFIEDReport encrypted
Scan complete
0 critical · 0 high
Automated analysisOWASP Top 10CVEGitHubPDFEncrypted reports
The platform
Two numbers. Everything you need.
PentestLouis distills your security posture into two clear metrics — understandable at a glance for executives and actionable in detail for developers.
Code + dependencies + secrets + web
Security Score
A score out of 100 derived from static analysis, dependency audits, secrets detection, and web scans. Understand your risk level instantly.
87/100
Strong
↑ +4 since the last assessment
Static analysis
44/50
AI Pentest
43/50
Web application scan
Good
Dependency audit
47/50
AI-powered attack simulation
AI Attack Resistance
An AI agent attempts to compromise your application within your chosen budget. If it cannot break through, your resistance level is verified.
€2,000
VERIFIEDCertified analysis model
Timestamped result
Verifiable proof
Security attestation
Share a verifiable attestation in your README, on your website, or with customers.
PentestLouis€2KVERIFIED
How it works
From repository to report in four steps.
01
Connect GitHub
Grant read-only access to a repository. PentestLouis never writes to your code.
02
Run the analysis
Code, dependencies, secrets, and the web application are reviewed automatically.
03
Choose the depth
Set the AI agent’s maximum budget according to the size and risk of your project.
04
Get the report
Every verified finding is explained clearly, then detailed for the technical team.
Capabilities
All your security in one place.
Static analysis
Finds vulnerabilities, configuration mistakes, and risky patterns in your code.
Learn moreDependency audit
Checks your project packages against known public vulnerabilities.
Learn moreSecrets detection
Finds exposed API keys, tokens, and credentials before they can be exploited.
Learn moreWeb application scan
Reviews headers, CORS, authentication, and the most common OWASP risks.
Learn moreAI Pentest
Explores attack paths like an adversary, up to the spending limit you set.
Learn moreActionable report
Prioritizes findings by severity with explanations for both decision-makers and developers.
Learn morePricing
You choose how deep to go.
Start with automated checks. For the AI Pentest, you set the exact maximum exploration budget.
Automated analysis
€0
A clear first assessment of your code and web attack surface.
- Static code analysis
- Dependency audit
- Secrets detection
- Web risk scan
- Security Score out of 100
The initial diagnostic is free. AI agent exploration is a separate paid step.
Start for freeExploration by an AI agent
From€50up to €50,000
The agent explores as deeply as your chosen budget allows and stops automatically at the limit.
Advanced · €2,000
A deeper exploration of several sensitive user flows.
The amount you choose is an exploration cap, not a guarantee of finding a vulnerability or covering every risk.
- Spending cap selected before launch
- Findings verified before reporting
- Encrypted PDF report
- Result included in the overall score
These tiers are guidelines: confirm the cap in your account before launch. A self-service payment is limited to €10,000.
Sign in and startStart securing your application today.
Connect your repository and get a clear first assessment. No write access to your code.
Choose how you want to sign in
Continue with GitHub
Connect your repository in just a few clicks.
Get a link by email
No password required.
We request access to your repositories so we can read and analyze them. The application never writes to your code.