CyberSanctus

CyberSanctus presents itself as a cybersecurity provider focused on threat-driven penetration testing that simulates real-world attacks to uncover vulnerabilities that put businesses at risk. The website lists One-Off Penetration Test (WAPT for web applications, networks, and mobile apps), Red Team Engagement, and Vulnerability Assessment services, with a contact form for tailored or large-scale testing programs. It also promotes CodeHound, described as an upcoming AI-powered smart contract auditing agent that integrates with development workflows, supports Solidity files and Hardhat or Truffle projects, and offers GitHub integration for scanning commits. The page states CodeHound is powered by GPT-4o, though it is described as coming soon and as an experimental platform.

Key features

• Threat-driven penetration testing simulating real-world attacks
• One-Off Penetration Test with manual and automated testing, OWASP Top 10 coverage, and verified exploit findings
• Red Team Engagement with goal-based attack simulation, external and internal attack paths, optional social engineering, Active Directory and cloud attacks, and detection and response evaluation
• Vulnerability Assessment with automated scanning, misconfiguration detection, and asset and service discovery
• CodeHound AI-powered smart contract auditing (coming soon) for single Solidity files or Hardhat and Truffle projects
• CodeHound GitHub integration for scanning latest commits and tracking vulnerabilities
• CodeHound static and dynamic scanners combined with a fine-tuned GPT-4o model

Best suited for

• Organisations seeking penetration testing of web applications, networks, or mobile apps
• Organisations wanting adversary simulation and red team exercises
• Teams needing automated vulnerability scanning and misconfiguration detection
• Blockchain developers auditing Solidity smart contracts

Pricing

Not stated on the website