ORDAL

ORDAL provides continuous, autonomous pentesting delivered by an AI agent. It is intended to replace the annual manual penetration test with testing that runs at the pace of a customer's deployments. The agent works in a cycle of steps: - Recon: maps domains, subdomains, APIs, cloud, internal network and shadow IT. - Enumeration: ranks the discovered surface by reachability, exposure and risk. - Controlled attack: runs attacks such as SQL injection, XSS, authentication bypass, privilege escalation and lateral movement against the customer's staging environment, within an agreed scope. - Proof of concept: every reported finding includes a reproducible exploit. - Remediation: writes a patch, re-runs the exploit against it, and opens a pull request on the customer's repository for review and merge. - Continuous re-test: revalidates on each deploy to catch regressions. ORDAL tests web applications, APIs, cloud, networks, AI agents and LLMs. It runs on its own model, which starts from a base model and is fine-tuned on real pentests, validated exploits and findings from the team's manual work. The company also publishes research on vulnerabilities it has found and disclosed. ORDAL is based in Spain and serves technology companies in Europe, including those with ENS and NIS2 obligations. It was founded by CEO Alvaro Morales and CTO Antonio Harley, and is supported by NVIDIA Inception, Google for Startups, Lanzadera, ENISA and INCIBE Emprende.