Home / Directory / AI SaaS tooling / AI penetration testing / Ethiack
Ethiack
AI penetration testing company from Coimbra, Portugal whose Hackian agent maps attack surfaces, tests continuously, and proves which flaws can be exploited.
Mid-size and enterprise security teams in Europe that want continuous external pentesting with proof of exploit instead of an annual audit.
Teams that need deep internal network or cloud configuration testing on the entry plan, or US buyers who want a long US reference list.
Verdict
Ethiack is a cybersecurity company in Coimbra, Portugal, founded in 2022 by childhood friends Jorge Monteiro, a space engineer turned founder, and André Baptista, an ethical hacker, with Vítor Pinho joining as a co-founder. Its Hackian agent continuously discovers domains, APIs, and web apps, validates exploitability with proof of exploit, and ranks fixes, while Ethiack's human researchers add new attack techniques. It matters because yearly pentests miss changes made in between, and Ethiack tests every day with findings a team can act on.
Score Breakdown
How Ethiack scores in the categories that matter to its buyers.
Pricing
Ethiack publishes prices for one-off and continuous pentesting. Enterprise is custom.
| Plan | Price | What stands out |
|---|---|---|
| On-Demand Pentest | €3,000 per test | Compliance-ready report within 5 days; bundles available |
| Continuous Core | €9,000 / year (listed €12,000) | Continuous pentesting and attack surface security up to 50 assets |
| Enterprise | Custom | More than 50 assets, internal, mobile, or cloud environments |
The Field at a Glance
How Ethiack compares with other AI penetration testing vendors we reviewed, by Overall Score and relative typical engagement cost.
Ethiack scores 7.7 in AI penetration testing, under XBOW (7.8), and ahead of RunSybil (7.4) and Terra Security (7.3). Relative cost lands mid-band for this subcategory.
Use-case matrix
| Use case | Fit | Notes |
|---|---|---|
| Continuous external pentesting | Strong | Hackian tests attack surfaces 24/7. |
| Finding unknown assets | Strong | Customers cite discovery of hidden assets. |
| Compliance pentest reports | Strong | On-Demand reports arrive within 5 days. |
| Proof of exploit | Strong | Findings are validated before alerting. |
| Internal networks and cloud | Mixed | Covered with Beacon or on Enterprise. |
| Large US enterprise references | Weak | Named customers are mostly Portuguese companies. |
Who it’s for
Good fit
- European mid-market security teams
- Groups with many subsidiaries and domains
- Companies needing yearly compliance pentests
Poor fit
- Internal-only network assessments on a small budget
- Buyers wanting a US-based vendor
- Teams wanting red-team consulting only
Review Excerpts
Below are excerpts from public reviews. Our team scoured public reviews, forums, and chat rooms to get a balanced view of customers' experience with this company. Paid reviews and pay-for-play sites such as Clutch were excluded.
“The way Ethiack incorporates EASM with AI Pentesting has brought us simplicity and proactivity in solving large-scale problems. As a group with so many companies and exposed assets, doing this work manually was simply impossible.”
“We have lots of security solutions, but I look at Ethiack first, because I know that when Ethiack alerts us, it’s always valid and most probably serious.”
“I’ve been genuinely impressed by Ethiack's work. Unlike traditional point-in-time audits, they provide continuous security testing, which has given us a lot of peace of mind by catching vulnerabilities in real-time.”
The Continuous Core plan covers up to 50 assets; attack surfaces beyond that, or internal, mobile, and cloud environments, move to custom Enterprise pricing.
Company Facts
- Founded
- 2022 (CB Insights)
- Headquarters
- Coimbra, Portugal (CB Insights)
- Total funding raised
- $5.2M (CB Insights)
- Key investors
- Startup Wise Guys, Amena Ventures, Start Ventures, Paulo Marques, Aralab (CB Insights)
- Website
- ethiack.com
Key Leadership

Jorge Monteiro
Co-founder and CEO
Methodology
This page is an independent evaluation of Ethiack for buyers comparing options in ai penetration testing. AI Industry Reviews accepts no sponsorships, advertising, or pay-for-placement fees. Ethiack did not pay for this review.
What we scored
The headline number is an Overall Score on a 0-10 scale. Eight criteria sit under it in two groups.
- Buyer outcomes (for ai penetration testing)
- Continuous testing coverage
- Finding accuracy
- Pricing transparency
- Internal and cloud depth on entry plan
- Company & commercial
- Innovation & product leadership
- Project management & communication
- Pricing
- Contract fairness
Pricing measures whether the price looks fair for the value delivered, including packaging and renewal friction that show up in real buying cycles.
Score Composition
| Input | Weight | What it covers |
|---|---|---|
| Reviews | 40% | A proprietary read of what practitioners say about likes, complaints, and day-to-day use, including public review sites, forums, and private chat rooms. Paid reviews and pay-for-play sites such as Clutch are out of scope. |
| Product | 35% | Hands-on look at screens and workflows. |
| Pricing | 15% | Whether the price looks fair for what you get. |
| Docs & training | 10% | Docs, tutorials, and training material. |
How we balanced the evidence
The Overall Score is the simple average of the eight criteria. Recommendation language follows that score and the fit pattern described above.
Scope
Ethiack is graded here as ai penetration testing. Criteria scores can move as more review volume and product checks are added.
