Last verified · Added · 2 sources · How we verify
Visit official site (opens in new tab) Claim this listing
Vendor? Get your “Listed on Agent Index” badge
What it does
YesWeHack, a Paris-headquartered bug bounty and offensive security company, offers Agentic Pentest: on-demand pentests in which AI agents find vulnerabilities, validate exploitability and prove real-world impact on externally exposed assets. Black, grey or white box testing returns same-day results. The vendor says its agents draw on YesWeHack's bug-hunting experience, including community guides and its Vulnerability Vectors articles, and chain the latest bug-hunting techniques to find issues such as IDOR, broken access control, RCE and SQL injection, with full OWASP Top 10 coverage. Built-in validation workflows and dedicated verification agents ensure only qualified, reproducible vulnerabilities reach the customer. Testing uses state-of-the-art LLMs, including open-weight models, with in-house guardrails. A dedicated Pentest Manager guides each campaign, and findings arrive as enriched reports in YesWeHack's vulnerability-management platform. Pricing is not published.
Frameworks
No framework tags verified yet.
Pricing (as published)
Not published
Tasks
pen-test-managementattack-surfaceappsecvulnerability-management
Sources
Last verified 18 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email sales@heritageservices.online. See our methodology.
Use-case comparisons
- Agentic pentesting AI agents — 10 verified listings (Autonomous or AI-assisted penetration testing, attack-surface testing and exploitable-path verification)
Compare YesWeHack Agentic Pentest with
- 7AI agentic security platform vs YesWeHack Agentic Pentest
- Abnormal AI Security Mailbox (Abnormal AI for Government) vs YesWeHack Agentic Pentest
- Andesite Human-AI SOC (Azimuth for Government) vs YesWeHack Agentic Pentest
- AWS Continuum for penetration testing (formerly AWS Security Agent) vs YesWeHack Agentic Pentest
- CloudSEK AI Agents vs YesWeHack Agentic Pentest
- Conveyor vs YesWeHack Agentic Pentest
- Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR) vs YesWeHack Agentic Pentest
- CrowdStrike Charlotte AI vs YesWeHack Agentic Pentest
- Cyble Blaze AI vs YesWeHack Agentic Pentest
- D3 Morpheus (agentic AI SOC platform) vs YesWeHack Agentic Pentest
Alternatives
- 7AI agentic security platform — Boston-based agentic security platform where swarms of specialised AI agents categorise, investigate and reach a determination on every alert, escalating only what needs a person, with optional managed service (PLAID ELITE).
- Abnormal AI Security Mailbox (Abnormal AI for Government) — Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
- Andesite Human-AI SOC (Azimuth for Government) — Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.
- AWS Continuum for penetration testing (formerly AWS Security Agent) — AWS frontier agent (formerly AWS Security Agent) that runs on-demand penetration tests of your applications with tailored multi-step attack scenarios, reproducible proof and ready-to-implement fixes, billed per task-hour.
- CloudSEK AI Agents — Predictive attack-path platform whose AI agents correlate digital-risk, attack-surface and threat signals into validated paths, plus AIVigil for exposed AI and agentic workflows.
- Conveyor — Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content.
See all YesWeHack Agentic Pentest alternatives →
Stay updated
We use your email only to send the newsletter. See our privacy policy.