AvalonX makes enterprise-grade offensive security continuous, accessible and affordable. It is built on two things we own outright: Artemis, the platform that runs a fleet of autonomous offensive-security agents, and Aether, the security AI those agents reason with. Together they test your business the way an attacker would, as often as you need.
A scanner checks a list and produces a report. Artemis agents plan, execute against real security tools, evaluate what comes back and decide what to do next — so the next move depends on the last result. That is the difference between knowing a weakness exists and understanding the path an attacker could actually take through your business.
Artemis is the platform that orchestrates specialised agents covering reconnaissance, enumeration, exploitation, lateral movement and reporting, passing context from one stage to the next. Aether is the security AI behind them — roughly 400 billion parameters, trained extensively on nine years of proprietary offensive-security data and backed by 60 billion dark-web records.
Both, deliberately. The agents do the discovery, and where something needs expert judgement Artemis escalates to our human penetration testers. You get autonomous speed with human verification behind the findings, which is why we report verified findings rather than raw output.
Testing completes in hours, with clear, verified findings delivered the same day. There are no lengthy scoping calls and no weeks of back-and-forth — you add your domain, confirm your scope and go.
That is what you choose. Essentials runs quarterly testing, Pro runs monthly and 360 runs weekly, and every plan includes continuous vulnerability scanning between tests. You can also fix, retest and run another test whenever you want.
Every plan covers up to 10 targets, tested and scanned at your plan’s cadence.
Yes — AvalonX maps findings to the controls and requirements relevant to your organisation, helping you maintain up-to-date testing evidence for frameworks including SOC 2 Type II, ISO/IEC 27001:2022, PCI DSS v4.0 and HIPAA/HITECH. It supports your compliance programme and audit evidence; it does not by itself make you certified.
We only ever test the scope you authorise, and nothing outside it. Findings from your tests belong to you — we do not publish them and we do not resell them. Our free external test is read-only reconnaissance: nothing is altered and nothing is installed on your systems. If you need our full security, data-handling and data-residency detail for a vendor review, get in touch and we will share it.
No. AvalonX is built for the businesses that have historically been priced out of offensive security — no dedicated CISO, no in-house red team. Findings are written to tell you what is wrong, why it matters and what to do next, without you having to decode security jargon.
Plans start at $249 a month. You can compare the plans or book a demo and we will recommend a testing cadence for your attack surface.
Run a free external test from the home page to see what Artemis finds on a domain you own, or book a demo and we will walk you through it on your own attack surface.