The AI-native,
whiteboxwhiteboxblackboxgrayboxwhiteboxblackbox, graybox, whitebox pen test

We needed a new penetration test report for a 3rd party with high urgency, and Trace turned it around faster than a traditional firm could even get us on the calendar. Every finding came with a working exploit and clear remediation — no list of maybes to chase down. They surfaced real, exploitable issues we hadn’t caught.

We needed a new penetration test report for a 3rd party with high urgency, and Trace turned it around faster than a traditional firm could even get us on the calendar. Every finding came with a working exploit and clear remediation — no list of maybes to chase down. They surfaced real, exploitable issues we hadn’t caught.

We have worked with a ton of vendors over the years, Trace stands out because 1) they have a solid, novel approach that is more fitting for the AI-world, 2) it’s not security theater, Trace actually does what I’d call a “real” pen test, 3) they respond super fast and treat customers right. 10/10!

Our customers are private equity firms who are extremely sensitive about their data. Unlike our legacy pen testers, Trace mapped our code and cloud configurations with the latest frontier models and genuinely improved our security posture.

This is what an AI-assisted penetration test should look like. The product is mature, the CLI-native workflow drops straight into our agent setup, and the attack chains make it obvious why each finding matters.

Trace is the first truly capable penetration testing system I’ve seen. It goes far beyond security theater and actually surfaces real threats. I highly recommend Trace to any company that cares about security.

The Trace team is doing a phenomenal job. AI is great for the attackers, but they are making sure that it is useful for defenders as well. The key is providing the agents with context and doing a whitebox test.

Honestly, whitebox plus AI was excellent: they have access to the code and automatically spot the vulnerabilities. We’d run a greybox test before and those flaws were never found. Very happy with the experience and with Trace. The report they delivered is high quality, nothing to add, it’s perfect.

We needed a new penetration test report for a 3rd party with high urgency, and Trace turned it around faster than a traditional firm could even get us on the calendar. Every finding came with a working exploit and clear remediation — no list of maybes to chase down. They surfaced real, exploitable issues we hadn’t caught.

We needed a new penetration test report for a 3rd party with high urgency, and Trace turned it around faster than a traditional firm could even get us on the calendar. Every finding came with a working exploit and clear remediation — no list of maybes to chase down. They surfaced real, exploitable issues we hadn’t caught.

We have worked with a ton of vendors over the years, Trace stands out because 1) they have a solid, novel approach that is more fitting for the AI-world, 2) it’s not security theater, Trace actually does what I’d call a “real” pen test, 3) they respond super fast and treat customers right. 10/10!