For organisations that need testing
Kinetics Assessments
Our operators and AI agents test your applications and infrastructure. Every finding is exploited, verified and documented, for a fixed price.
No high or critical finding, no charge.
Our verification removes false positives before the report. If none of the remaining findings is rated high or critical, the assessment is free.
How it works
Scope
Send us the target. Within one working day we confirm the scope and send the authorisation to sign, and nothing starts without it.
Test
Agents map the attack surface and test in parallel, directed by our operators. Exploiting sensitive targets waits for human approval, and a proxy keeps traffic inside the agreed scope.
Report
Each finding is exploited a second time to confirm it, then delivered with its impact, reproduction steps, evidence and remediation guidance.
What we test
- Web applications and APIs
- Authentication, access control, business logic and the OWASP Top 10, with or without credentials.
- External infrastructure
- Everything reachable from the internet, including exposed services, remote access, email and DNS.
- Internal network and Active Directory
- From the position of a compromised device: privilege escalation, lateral movement and paths to domain takeover.
What you receive
- An executive summary for management
- Verified findings with proof of concept and remediation guidance
- A methodology based on OWASP and PTES
- A free retest of fixed findings within 90 days
- A report you can use as evidence for ISO 27001 and SOC 2
Pricing
CHF 2'900 per assessment
One web application with its APIs, or an external perimeter of up to 16 public IP addresses.
Larger scopes, internal networks and Active Directory are priced after a short call.
No high or critical finding, no charge.
Questions
- Is testing safe for production systems?
- Testing stays inside the agreed scope, enforced by a proxy. Exploiting sensitive targets waits for human approval, and test windows are agreed with you in advance.
- Do you need our source code?
- No. By default we test as an outside attacker. Credentials or access to code let us test deeper, and you decide what to share.
- How do you rate severity?
- We rate every verified finding with CVSS 4.0. If none is rated high or critical, the assessment is free.
- How long does it take?
- A standard assessment is usually tested and reported within one week of the agreed start date.
Start an assessment
Send us the target. Within one working day we reply with the scope and the authorisation to sign.
Other ways to work with Kinetics.
For in-house red teams
Kinetics Platform
Your operators and AI agents in one command centre, installed on your own servers. Agents take on the operational work, and your team directs, approves and decides.
For individual security professionals
Kinetics OperatorEarly access
Kinetics for security professionals working on their own, without running the platform yourself. We are opening access in small groups.
