Ethiack
Ethiack builds autonomous, agentic-AI offensive-security technology that continuously maps attack surfaces, tests systems, validates real exploitability, and provides proof-of-exploit and remediation guidance. Its stated mission is to expose and validate real risks before attackers strike and secure technology and the people who rely on it.
At a Glance
- SMEs and enterprise security teams
- Fast-shipping technology companies and SaaS providers
- Financial services and regulated industries
- Healthcare
- +5 more
AI Tools by Ethiack
(1)Ethiack Zero
Live Emerging Vulnerability Tracker
Discussions
No discussions yet
Be the first to start a discussion about Ethiack
Latest News
Now Detecting: CVE-2026-111497 (Node2Shell)
Attackers don't wait for the CVE. Ethiack Zero doesn't either.
Now Detecting: CVE-2026-109618/CVE-2026-109619 (php2shell)
Now Detecting: WP2Shell - Pre-Authentication RCE in WordPress Core
Products & Services
Autonomous and continuous offensive-security platform combining attack-surface management, exploit validation, risk-based vulnerability management, exposure management, pentesting-as-a-service and compliance reporting.
Ethiack's agentic AI pentesting engine. It continuously maps attack surfaces, discovers vulnerabilities, executes attack and exploitation routines, chains attack paths, validates exploitability and produces proof-of-exploit and mitigation guidance.
A public, live tracker of emerging zero-days and vulnerability signals. It records Ethiack's time-to-validate alongside public disclosure and real-world exploitation signals, and provides a public feed, API and MCP server.
AI- and human-ethical-hacker web-application and API penetration testing with compliance-ready reporting, high-signal exploit-validated findings and unlimited retesting.
Market Position
Ethiack positions itself as a European autonomous and continuous offensive-security platform that combines agentic AI pentesting with ethical-hacker expertise, continuous attack-surface mapping and proof-based exploit validation rather than periodic scans or scanner-noise severity. It competes with AI/autonomous pentesting and breach-and-attack-simulation providers such as XBOW, Horizon3.ai and Pentera, human-led platform providers such as Synack, and conventional penetration-testing and attack-surface-management vendors.
Leadership
Founders
Jorge Monteiro
CEO and co-founder; a space engineer turned entrepreneur who applied systems-building and scalable-operations methods to Ethiack.
André Baptista
CTO and co-founder; an elite ethical hacker, security researcher, programmer and bug-bounty specialist who established Ethiack's core security principles.
Vítor Pinho
CCSO and co-founder; a pianist turned hacker whose creative mindset and technical precision helped shape Ethiack's hacker-first culture.
Executive Team
Jorge Monteiro
Chief Executive Officer (CEO)
Co-founder; space engineer turned entrepreneur with a systems-building and operations background.
André Baptista
Chief Technology Officer (CTO)
Co-founder; ethical hacker, security researcher, programmer and bug-bounty specialist.
Founding Story
Jorge Monteiro and André Baptista had been friends since age three, and Vítor Pinho later joined them. They saw that growing attack surfaces and security-team noise made manual testing unable to scale; Ethiack was started in 2022 to make security testing continuous, fast and meaningful, combining ethical-hacker expertise with automation and AI.
Business Model
Revenue Model
B2B cybersecurity subscriptions for continuous platform access, supplemented by per-test/on-demand pentesting, bundles and customized enterprise engagements.
Pricing Tiers
On-demand pentest; bundles and customized pentests are available.
Continuous security testing and platform access for up to 50 assets.
Full attack-surface coverage, custom reporting and test types, AI and human pentesting as a service, and custom integrations.
Target Markets
- SMEs and enterprise security teams
- Fast-shipping technology companies and SaaS providers
- Financial services and regulated industries
- Healthcare
- Government and critical infrastructure
- Manufacturing and industrial organizations
- Continuous security testing for AI and SaaS companies
- Financial-services security and DORA preparation
- Healthcare and patient-data protection
- Government and critical infrastructure security and NIS2 preparation
- Manufacturing industrial IT, OT and supply-chain environments
- Telecommunications infrastructure, APIs and subscriber systems
- ANA Airports
- SONAE
- Broadvoice
- CNCS