# Hadrian > Hadrian is an agentic offensive security platform. Its AI agents continuously map an organization's external attack surface, try to exploit what they find the way a real attacker would, and report only exposures they can prove are exploitable. The platform has two products: Atlas covers breadth (continuous attack surface management plus validation of everything an organization exposes online) and Nova covers depth (on-demand agentic penetration testing of one application, from €1,250 per test). Hadrian was founded in Amsterdam in 2021. Every finding comes with proof of exploitation, reproduction steps and remediation guidance, and is retested after a fix. Hadrian needs no agents or credentials, runs from the cloud, and integrates with tools such as Jira, ServiceNow, Slack, Microsoft Teams, Splunk and Microsoft Sentinel. The site is available in English, French, German and Italian: every page below also exists under /fr, /de and /it (for example https://hadrian.io/fr/pricing). ## Products - [Hadrian platform (Atlas + Nova)](https://hadrian.io/products/hadrian-platform): continuous attack surface management and on-demand agentic pentesting in one attacker-perspective platform - [Atlas](https://hadrian.io/products/atlas): continuously discovers and validates the external attack surface, surfacing only exploitable exposures with business context and fix steps - [Nova](https://hadrian.io/products/nova): full-scope agentic penetration tests on demand (reconnaissance, exploitation, privilege escalation and validated findings in hours, not weeks) - [Pricing](https://hadrian.io/pricing): Nova starts at €1,250 per test, with bundles available; Atlas is priced on total asset count, by quote; add-ons for M&A assessment and infostealer credential leak detection - [Request a Nova pentest](https://hadrian.io/nova-request): start an on-demand agentic pentest ## How it works - [Technology](https://hadrian.io/technology): how Hadrian automates the five phases of Continuous Threat Exposure Management (CTEM): scoping, discovery (continuous, event-driven scanning of the external attack surface, including shadow IT), prioritization (validated risk with business context, beyond CVSS/EPSS), validation (AI agents attempt the exploit and produce a proof of concept) and mobilization (remediation guidance, ticketing integrations and automatic retesting). On average, 6 verified exploitable exposures out of 1,000 assets scanned - [What is Hadrian?](https://hadrian.io/what-is-hadrian): plain-language overview of the platform and common questions - [Integrations](https://hadrian.io/integrations): ticketing and ITSM, messaging and on-call, SIEM/SOAR, endpoint and threat intelligence, cloud and edge (AWS, Azure, Google Cloud, Cloudflare), support and CRM - [Platform tours](https://hadrian.io/tour-the-platform): interactive point-and-click product tours - [Atlas tour](https://hadrian.io/tour-the-platform/atlas): guided tour of continuous attack surface management - [Nova tour](https://hadrian.io/tour-the-platform/nova): guided tour of launching an agentic pentest and reviewing validated findings ## Solutions - [Agentic penetration testing](https://hadrian.io/solutions/agentic-penetration-testing): AI agents that pentest like skilled human testers, on demand - [Continuous pentesting](https://hadrian.io/solutions/continuous-pentesting): test the external attack surface every time it changes and run full Nova pentests on demand - [Automated red teaming](https://hadrian.io/solutions/automated-red-teaming): continuous, agentic attacker-perspective testing of the external attack surface that chains exposures into proven attack paths - [Remediation validation](https://hadrian.io/solutions/remediation-validation): automatic retests confirm a fix closed the exposure, with evidence for tickets and audits - [Adversarial exposure validation (AEV)](https://hadrian.io/solutions/adversarial-exposure-validation): prove which exposures are exploitable instead of triaging scanner alerts - [Continuous attack surface management](https://hadrian.io/solutions/continuous-asset-discovery): always-current inventory of internet-facing assets, including shadow IT - [Threat exposure management (CTEM)](https://hadrian.io/solutions/threat-exposure-management): run a CTEM programme end to end - [Emerging threat response](https://hadrian.io/solutions/emerging-threat-response): new critical CVEs tested against your assets within 24 hours - [Leaked credentials and infostealers](https://hadrian.io/solutions/infostealer-infections): detect credentials and sessions stolen by infostealer malware - [Cloud exposure (AWS, Azure, GCP)](https://hadrian.io/solutions/cloud-misconfigurations): find and validate misconfigured public cloud resources - [DNS misconfigurations and takeover](https://hadrian.io/solutions/dns-monitoring): monitor DNS records and catch dangling records before subdomain takeover - [Acquisitions and subsidiaries](https://hadrian.io/solutions/acquisitions-and-subsidiaries): assess the attack surface of acquired companies and subsidiaries ## Industries - [Aviation and travel](https://hadrian.io/industries/aviation) - [Energy and utilities](https://hadrian.io/industries/energy) - [Financial services](https://hadrian.io/industries/financial-services) - [Gaming and media](https://hadrian.io/industries/gaming-media) - [Healthcare](https://hadrian.io/industries/healthcare) - [Manufacturing](https://hadrian.io/industries/manufacturing) - [Maritime and logistics](https://hadrian.io/industries/maritime) - [Public sector](https://hadrian.io/industries/public-sector) - [Retail and e-commerce](https://hadrian.io/industries/retail) - [Technology and SaaS](https://hadrian.io/industries/technology) ## Teams - [CISOs](https://hadrian.io/teams/ciso) - [GRC and compliance](https://hadrian.io/teams/grc) - [Offensive security teams](https://hadrian.io/teams/offensive-security) - [Security operations](https://hadrian.io/teams/security-operations) - [Service providers (MSSPs and pentesting firms)](https://hadrian.io/teams/service-providers) - [Vulnerability management](https://hadrian.io/teams/vulnerability-management) ## Frameworks - [DORA](https://hadrian.io/frameworks/dora) - [ISO 27001](https://hadrian.io/frameworks/iso-27001) - [MITRE ATT&CK](https://hadrian.io/frameworks/mitre-attack) - [NIS2](https://hadrian.io/frameworks/nis2) - [SOC 2](https://hadrian.io/frameworks/soc-2) ## Customers - [Case studies](https://hadrian.io/resources?tag_equal=case+studies): all customer case studies (/case-study redirects here) - [Damen Shipyards Group](https://hadrian.io/case-study/damen-shipyards-group): shipbuilder that uses Hadrian to focus on the real security issues instead of scanner noise - [Breeze Airways](https://hadrian.io/case-study/breeze-airways): a lean airline security team gets visibility and validation to stay ahead of exposures - [Worldstream](https://hadrian.io/case-study/how-worldstream-operationalized-continuous-exposure-management-across-a-critical-infrastructure-environment): continuous exposure management across a critical infrastructure environment - [SHV Energy](https://hadrian.io/case-study/shv-energy): global energy distributor that mapped all external assets and saved 40 hours per week - [Leroy Merlin](https://hadrian.io/case-study/leroy-merlin): European home improvement retailer prioritizing its most critical risks ## Research and free tools - [Blog](https://hadrian.io/blog): research, vulnerability analysis and product news - [Vulnerability alerts](https://hadrian.io/blog): analyses of newly disclosed, actively exploited vulnerabilities, published under /vulnerability-alerts/ and listed on the blog - [Resources](https://hadrian.io/resources): reports, guides, datasheets and case studies - [Exposure Clock](https://hadrian.io/exposure-clock): counts the vulnerabilities disclosed since your last pentest and how many are remotely exploitable or in CISA's KEV catalogue - [Exposure Maturity Assessment](https://hadrian.io/maturity-model): score an external exposure programme across five capabilities and get next steps - [Free external exposure scan](https://hadrian.io/external-security-report): a free report on how your organization appears to attackers - [Community tools](https://hadrian.io/community-tools): free and open-source tools from Hadrian's hackers for reconnaissance, asset discovery and code review - [FAQ](https://hadrian.io/faqs): questions about agentic pentesting, exposure management and the platform ## Company - [About Hadrian](https://hadrian.io/company): founded in Amsterdam in 2021 by Rogier Fischer, Olivier Beg and Maurice Clin; mission, story and leadership - [Contact](https://hadrian.io/contact): contact form and offices - [Book a demo](https://hadrian.io/demo): a 15-minute walkthrough with a security expert - [Events](https://hadrian.io/events): conferences and events where Hadrian presents - [Partnerships](https://hadrian.io/partnerships): partner programme and how to become a partner ## Optional - [Vulnerability disclosure policy](https://hadrian.io/vulnerability-disclosure-policy) - [Privacy policy](https://hadrian.io/privacy-policy) - [Terms and conditions](https://hadrian.io/terms-conditions) - [Nova terms](https://hadrian.io/terms-conditions/nova) - [Partner code of conduct](https://hadrian.io/partner-code-of-conduct)