Frequently Asked Questions

Each Hadrian finding is validated before it reaches you, with reproduction steps and evidence. Human testers can still find issues that need deep context, such as complex business logic flaws. Running both and comparing results is a good way to see where each adds value.

Most customers keep a human-led pentest for targeted work, such as red team exercises or a framework that requires an independent tester. Hadrian covers the rest of the attack surface continuously, so the human engagement can focus on depth.

You approve the scope before any test starts, and Hadrian's hackers run a safety check before higher-risk testing goes ahead.

Hadrian tests your external attack surface, including domains, subdomains, web applications, APIs, cloud assets, login portals, and third-party and partner portals. Nova's agents also cover authenticated testing, authorization and insecure direct object reference (IDOR) testing, cross-tenant testing, business logic, and attack chains.

Hadrian handles the breadth and frequency that human testers can't sustain: continuous coverage across the full attack surface, on demand, with consistent quality. For specialized work such as red team exercises or deep application logic testing, human expertise still has a role. Many customers use Hadrian as their continuous baseline and bring in manual testers for targeted deep dives.

Traditional pentests are point-in-time and scope-limited, and their quality varies with who gets assigned. They take weeks to schedule and deliver a report that's outdated before it lands. Hadrian runs on your schedule, covers your full external perimeter, and delivers validated findings in hours, with no procurement cycle or SOW. Results are consistent from one test to the next because they don't depend on an individual tester's skill or availability.

Agentic penetration testing uses autonomous AI agents, trained by experienced offensive security practitioners, to find and exploit weaknesses across your external attack surface. Traditional pentesting relies on a single tester working a fixed scope over a few weeks. Agentic pentesting deploys hundreds of specialized agents that work in parallel, adapt their approach based on what they find, and concentrate depth where real exploitation paths exist.

Hadrian is an agentic AI offensive security platform that continuously discovers your external attack surface and tests it for exploitable exposures. The platform deploys in minutes, operates autonomously, and delivers validated findings with reproduction steps and execution evidence. No agents to install, no infrastructure to manage.

Yes. Hadrian's agentic engine uses purpose-built AI agents to autonomously map, test, and validate exposures. Each agent is designed for a specific attack class and chains techniques the way a human attacker would. The system reasons about application behavior rather than pattern-matching against CVE lists.