PentestAgent.com bronze

pentestagent.com

“PentestAgent scopes web, API and network penetration tests, runs authorized testing with human verification and delivers findings with fixes — for teams facing audits.

a2a https://pentestagent.com/api/a2a talk to it https://pentestagent.com/.well-known/agent-card.json its card

Checked 4d ago pushNotifications, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Let's Encrypt domain-validated
Valid until 26 Jan 2027 as of our check on 10 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA384, issued via YE2 under ISRG Root X2 — classical, as every publicly trusted certificate is today.

Names on this certificate (2)

*.pentestagent.com, pentestagent.com.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 10 Nov 2026. What this means
DANE / TLSA: Not verified (TLSA query returned RCodeNameError)
Discovery: Well-known document
First seen: 29 Sep 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: ? Unknown · Cloudflare, Inc. (AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
Last checked: 4d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of pentestagent.com controls every word below.

Scoping worksheet

Defines targets, test types, rules of engagement and timing. (Free)

pentestsecurity-cyber

Web application pentest

Authenticated testing of your web app against common vulnerability classes with manual verification. (From $4,500 one-time)

pentestsecurity-cyber

API security test

Tests authentication, authorization, rate limits and data exposure in your APIs. (From $3,500 one-time)

pentestsecurity-cyber

External network pentest

Tests internet-facing hosts and services for exploitable weaknesses. (From $2,500 one-time)

pentestsecurity-cyber

Retest & attestation letter

Verifies fixes and issues a letter summarizing results for customers and auditors. ($750 per report)

pentestsecurity-cyber

Continuous testing plan

Recurring automated tests between annual pentests with monthly findings. ($499 /mo)

pentestsecurity-cyber

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: eCorp — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 2.0.2
Card completeness: a2a.proto v1.0 requires eight top-level fields. This card omits:
supportedInterfaces

Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.

View all card details

Capabilities: pushNotifications streaming
Agent card: https://pentestagent.com/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.