pwn.ai
pwn.ai
Information Security
Penetration Testing
Cybersecurity
As featured in
Claim pageClaim
Follow
Overview
Connections
News
Salaries
Products
People
Growth
Offices
Financials
Funding and backers
Momentum
15/100
in the news
Last sign of life
2 mo ago
a posting or a news item
The story so fareach stage dated by its source: the company's releases, the press, registers, filings
2019
Founded
Tractionpublic signals, read monthly
Web presence
top 0.43%
of 133.2M domains by links, Common Crawl
Hacker News stories
4
best: 3 points
Investors in similar startupsfunds that back the companies most like this one
Similar startupsby what they do, their industry and backers
Meet vPenTest, the automated network pentesting solution from Vonahi Security thats affordable, efficient, and built for MSPs & IT teams.
Get verified insights into your web and API security posture with SQUR. Proof of exploit, retest included, compliance-ready reports, and…
Find and fix web app and API vulnerabilities in 60 seconds with continuous, production-safe external scanning. Plus AI pentesting and…
Continuous pentesting powered by agentic AI. NIS2, DORA, ISO 27001 compliance. Audit-ready results in hours, hosted in Europe.
Antigen continuously maps and exploits your attack surface, fixes confirmed vulnerabilities, and verifies every remediation with AI-powered…
Novee delivers AI penetration testing to find vulnerabilities faster, validate defenses, and reduce cyber risk.
News
New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP
WordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under specific conditions.
Read more
Report
XSS2Shell: WordPress Preauth XSS to RCE Chain (CVE-2026-64638)
A pre-authentication XSS to RCE chain in WordPress Core that allows unauthenticated attackers to achieve remote code execution on any default WordPress installation through the login page.
Read more
Report
ImageMagick: From Arbitrary File Read to File Write In Every Policy
How pwn.ai turned a routine client pentest into multiple ImageMagick exploits. By autonomously researching the product's internals for days, it found a path from a single image upload to file leaks, security policy bypasses, and remote code execution acro
Read more
Report
CVE-2025-54322 (ZERODAY) - Unauthenticated Root RCE affecting 70,000+ Hosts
A critical zero-day vulnerability, CVE-2025-54322, has been discovered that enables Unauthenticated Root Remote Command Execution (RCE) in devices running Xspeeder's SXZOS firmware. These networking devices, primarily edge routers and SD-WAN appliances, a
Read more
Report