What you get in a $99 AIPentest brief

Free is a sample, not a teaser wall

AIPentest runs the same agents on a free scan as on a paid unlock. You get:

• A letter grade for the authorized target
• One validated finding with enough context to take it seriously

You do not get a dump of 400 CVE headers. The rest of the issues stay locked until you pay $99 once for that scan’s brief.

Inside the brief

• Every finding, ranked critical → info
• Endpoint and a short description of what was proven
• Evidence chain (what the agent observed)
• Attack-surface map of routes that were in scope
• Remediation notes a developer can act on
• PDF export for questionnaires and buyers

That is the difference between “something might be wrong” and “here is the IDOR on /api/export, here is the response, here is the fix.”

What $99 is not

It is not a retainer, not a SOC 2 audit, and not a license to scan apps you do not own. Authorization (DNS, meta, or .well-known) is required. Testing is read-only.

If you need regular scans on a few projects, Developer at $29/month raises limits (3 projects, 10 scans) instead of paying $99 every time.

When unlocking is worth it

Unlock when you:

• Have a buyer asking for a security review
• Found a scary grade and need the other issues
• Are about to rotate keys and want the secret-exposure list

Start a free scan from aipentest.app. If the first finding is real, the brief is the rest of the map.