Continuous Security Claims
Verified With Cryptographic Proof
State what you believe is secure about your endpoints. Assumptr cryptographically verifies domain scope (scope.py), translates assumptions into multi-vector test cases, and executes zero-disruption validation scans.
6-Stage Sequential Security Scan Pipeline
assumption_parser.pyTranslates plain-English assumptions into structured test objects using Claude API.
Verify Domain Scope Cryptographically
Before running any assumptions, you must prove ownership of the target domain. Try the simulation below to see how our fail-closed scope guard works.
Validation, Not Exploitation
Traditional penetration testing toolkits attempt to break into systems and extract sensitive data. Assumptr confirms security controls exist and function, then stops immediately.
Cryptographic Scope
Domain ownership proven via DNS TXT or HTTP well-known token challenges with 90-day verification TTLs.
AI Assumption Parser
Claude API converts plain-English claims into structured test objects (attack_type, pass_condition).
18 Test Executors
Specialized execution suite covering SQLi, XSS, SSRF, JWT, GraphQL, Cloud S3, Webhooks, and Payments.
Raw HTTP Evidence
Every verdict is backed by raw HTTP Request/Response evidence logs for total transparency and auditability.
Multi-Vector Test Executor Suite
| Executor Routine | Capability Tier | Target Vulnerability Class / Scope |
|---|---|---|
| run_headers | CAP_HTTP | CSP, HSTS, X-Frame-Options, TLS versions, CORS wildcards |
| run_sqli | CAP_HTTP | SQLi and NoSQLi across GET/POST parameters, JSON bodies, cookies |
| run_xss | CAP_HTTP | Reflected, stored, and DOM-based Cross-Site Scripting |
| run_ssrf | CAP_HTTP | SSRF targeting cloud metadata (169.254.169.254) and localhost |
| run_graphql | CAP_HTTP | GraphQL introspection, IDE exposure, query depth/cost limits |
| run_auth | CAP_HTTP | JWT algorithm confusion (alg:none), session cookie flags |
Subscription Plans
Choose the tier that matches your infrastructure scope and capability requirements.