About
Pentrova is a self-serve, AI-powered penetration testing platform for web applications and APIs. Point it at a staging URL or upload an OpenAPI, Postman, GraphQL, Protobuf or WSDL spec. An LLM-driven agent handles login (SPA, OAuth, SAML, MFA), then tests for injection, DOM XSS, SSRF, authentication flaws, broken access control, cross-tenant isolation and business-logic issues like race conditions. Findings are verified against the live target before they are reported, and each one comes with a captured request/response and a reproducible command. The Authorization Matrix replays requests across roles to surface privilege bypasses. A single API call adds a pass/fail quality gate to GitHub Actions, GitLab CI, Jenkins, CircleCI, Azure Pipelines or Bitbucket, with SARIF and JUnit exports. Reports map findings to PCI DSS 4.0, ISO 27001:2022, HIPAA and GDPR controls. New workspaces get one free pentest, with no card required.