Authorized pen testing for your own site. Point us at a domain, verify it, get a report in 24 hours.
- Runs Kimi K3.1 Pro Obliterated, DeepSeek-V4.1-Flash-Obliterated, OrcaCyber-Zero, and other cyber LLMs
- 13 pen-test skills, including custom scripts
- Models hunt for weak spots and chain findings
- Plain-English report with evidence and fixes
- Fully hosted in our infrastructure
- Tokens, CPU and sandboxes are on us
- 100% refund if you’re not satisfied
EmailEmail
VerifyVerify
AuthAuthorize
PlanPlan
Hack yourself before someone else hacks you
What we do.
- We never ask for credentials: we only need your domain
- Traffic looks human (curl + browser automation)
- Plain-English report with evidence and fixes
- 13 pen-test skills, including custom scripts
- Runs entirely in our infrastructure
- We may submit forms and create test accounts during a run
What we don't do.
- We never need your code base: no code scanning
- We never need your product, DB, or server: we act as externals
- No access to internal networks or third-party services
- No phishing or social engineering: we never email or reach out to anyone
- No government, education, military or other critical sites
Do I need to own the site?
Yes. We only test domains we can prove you control. You start with your work email; we test the domain it belongs to.
How does verification work?
Enter a work email on the domain you want tested, like alice@acme.com. We send a six-digit code that you enter within ten minutes.
What gets tested?
Only the public web app on your verified domain: authentication, access control, input handling and session behaviour.
How fast is the report?
Within 24 hours of kickoff. The monthly plan includes one full test every month.
What does it cost?
$99 one-time, or $70 per month. Cancel anytime.
What if I’m not satisfied?
You get a 100% refund. For anything else, email support@mockhack.com.