AutonomousPentest IntelligenceAt Machine Speed.

Perseus uses Hermes to orchestrate adversarial workflows, execute chained exploits, and map attack surfaces — autonomously, continuously, without supervision.

perseus — pentest session
LIVE
scroll
10x
Faster than manual pentest
247+
Attack chain templates
99.8%
Coverage consistency
<5s
Avg time to first finding

Everything a pentest team does.
Done in minutes.

Perseus automates the entire penetration testing lifecycle — from initial recon through exploit chains to final reporting.

Core

Chain Attack Execution

Automatically links discovered vulnerabilities into multi-step exploit chains. SSRF becomes IDOR becomes RCE — Perseus finds the path.

Engine

Hermes Workflow Engine

Powered by Hermes's tool-calling architecture to orchestrate complex pentest sequences — recon, exploit, pivot, report — as a single agentic run.

Discovery

Autonomous Recon

Enumerate subdomains, map API surfaces, identify exposed services and version fingerprints. Full attack surface coverage without a single manual query.

Intelligence

Adaptive TTPs

Dynamically selects tactics, techniques, and procedures from a curated MITRE ATT&CK-aligned library based on what the target exposes.

Compliance

Full Audit Trail

Every action timestamped, every payload logged. Generate compliance-ready reports for OWASP, PTES, and NIST frameworks in seconds.

Scale

Multi-Target Orchestration

Run parallel assessments across multiple scopes simultaneously. Perseus intelligently queues, prioritises, and deconflicts concurrent engagements.

One vulnerability.
Unlimited reach.

Perseus doesn't stop at a single finding. It reasons about how vulnerabilities compose — chaining SSRF into IDOR into privilege escalation, automatically, at runtime. Each finding becomes a pivot point for the next attack.

SSRF → Internal SSRF → AWS Metadata Exfil
Auth bypass → IDOR → Horizontal privilege escalation
SQLi → File read → RCE via log poisoning
01
Recon & Enum
Subdomain brute-force, DNS zone walks, port scanning, service fingerprinting
02
Vuln Discovery
Auth tests, injection probes, SSRF, XXE, business logic flaws
03
Initial Access
Exploit confirmed vulnerability, establish persistent foothold
04
Pivot & Escalate
Lateral movement, privilege escalation, internal network mapping
05
Exfil Simulation
Data boundary testing, DLP bypass simulation, impact scoping

See Perseus in action.

Watch Perseus chain a real-world attack sequence from initial recon to root shell in under two minutes — no human in the loop.

perseus — live engagement demo
● REC

Watch the Demo

AutonomousNo human inputReal target

Demonstration conducted in an isolated lab environment against consented targets.

From zero to report.
Fully automated.

Four steps. One command. Complete pentest coverage.

01

Define Scope

Specify your target domains, IP ranges, and engagement rules. Perseus respects all boundaries and operates only within the defined scope.

perseus init --scope api.target.com \ --profile aggressive \ --exclude /admin/health
02

Hermes Orchestrates

Hermes's tool-calling engine spins up a workflow — spawning recon agents, coordinating exploit probes, and chaining findings in real-time.

[hermes] Spawning recon agents... [hermes] Tool: dns_enum → 247 hosts [hermes] Tool: port_scan → 14 open [hermes] Chain: ssrf_probe → success
03

Attacks Execute

Perseus autonomously selects, sequences, and executes attack chains based on discovered vulnerabilities. No human input required.

[attack] CVE-2024-1234: SSRF confirmed [attack] Pivoting to internal 10.0.0.0/8 [attack] IDOR at /api/v2/user/{id} [!] Privilege escalation: root
04

Report Generated

A structured, compliance-ready report is generated automatically: findings, CVSS scores, remediation steps, and evidence.

Report: engagement_2024-01-15.pdf Critical: 3 findings High: 7 findings Remediation playbook: included

Ready to unleash
Perseus on your stack?

Join the early access program. Get priority onboarding, a dedicated Hermes workflow configuration session, and direct line to the engineering team.

No credit card required · Authorized use only · Built for security teams

500+
Security Engineers
12k+
Engagements Run
84k+
Findings Reported