Parameter

Parameter is an autonomous penetration testing platform that runs AI agents against web applications, APIs, cloud infrastructure, and dependencies. It addresses the gap between periodic, point-in-time security assessments and software that changes continuously, testing on demand and on every release rather than once a year. Findings are validated by actually exploiting them, with each confirmed issue accompanied by a working proof-of-concept, reproduction steps, and remediation guidance.

The platform covers pentesting, cloud security, supply chain, and Sentinel, an AI reviewer that checks pull requests before merge. Additional capabilities include secrets detection, dependency management, and testing across web apps, infrastructure, APIs, auth flows, source code, and AI/LLM applications. Agents can run in whitebox, greybox, or blackbox mode, using a repository, an OpenAPI spec, or a live URL. Reports are generated for executive, customer-facing, auditor, and remediation audiences, with findings mapped to SOC 2 and ISO 27001. Testing is scoped and non-destructive, with an audit trail of agent actions.

Parameter is aimed at engineering and security teams that need continuous coverage alongside compliance evidence for frameworks including SOC 2, ISO 27001, PCI DSS, and FedRAMP. It is delivered as a service rather than a booked engagement, with pricing based on the size of what is tested rather than a per-engagement fee.