Evidence, not guesswork
You receive the scope actually tested and its limitations, the affected location, a reproducible finding and a risk assessment. Unverified alerts are not billable findings.
ONLINE SECURITY CHECKBeta offer
Find weaknesses.
Understand risk.
Take action.
AI-assisted penetration tests for your website and web applications. You only pay for verified, fully documented vulnerabilities. With a clear cost cap.
The check is free. We agree on scope and terms before testing begins.
Fictional report example
One finding.
A clear way forward.
Verified finding
Internal files publicly accessible
- Area
- Website file area
- What it means
- Confidential information could be viewed without the intended authorisation.
- Recommended next step
- Restrict access and identify the affected content.
Targeted retest after remediation
Illustration, no real customer data. Examples explain the result, not the testing method.
Our own infrastructureAI testing under our responsibility
Clear boundariesTesting scope authorised in writing
6-month retest windowTargeted verification of reported issues
RESULTS THAT MATTER
You don’t need a long list.
You need clarity.
An automated warning is not a verified vulnerability. We document substantiated findings and put them in context for your decisions.
Know what comes first
Severity, potential impact and concrete recommendations help your IT team or provider plan the next steps.
Verify the fix
After remediation, we can recheck the reported vulnerability within six months. Free of charge and with separate authorisation.
HOW IT WORKS
Four steps.
One point of contact.
- 01
Agree & authorise
We agree on domains, the test window, boundaries, data protection and pricing. Testing only begins after your written authorisation.
- 02
Test & verify
AI performs the check on our own infrastructure. Alerts are investigated; only substantiated vulnerabilities count as findings.
- 03
Deliver the results
You receive verified findings, evidence, severity and recommendations. High-risk issues are reported immediately with actionable advice.
- 04
Remediate & retest
Your IT team or provider fixes the vulnerability. On request, a free targeted retest follows within the agreed six-month window.
CONFIDENTIALITY & DATA PROTECTION
Your data deserves
the same care.
We are open about using AI and operate our own testing infrastructure. Before testing, we clarify what data is processed, who has access and when it is deleted.
Authorisation before access
We only test the systems agreed in writing. Scope, timing and an emergency contact are set beforehand.
Specific data protection terms
Data flows, the parties involved and retention periods belong in the agreement. Any required data processing agreement is concluded before testing.
Confidential findings
Results go to you. No public disclosure or use as a reference without your permission.
A security check is not a GDPR certificate or a guarantee that every vulnerability will be found.
BETA PRICING
Only verified findings count.
Costs have a limit.
The check is free. Verified, fully delivered findings are charged at the rates agreed beforehand. Remediation is a separate service.
Low
0€
Documented free of charge
Free advisory findings
Medium
125€
net / verified finding
Limited risk
High
375€
net / verified finding
Significant impact
Critical
750€
net / verified finding
Particularly severe impact
COST CAP
€1,250net per agreed assessment
Even with multiple verified findings. Agreed before testing, not revealed on the invoice.
Request a checkAll amounts exclude applicable VAT. Repeated instances of the same root cause are not billed multiple times. Severity, grouping of findings and the cost cap are agreed beforehand. The free retest covers reported vulnerabilities; new systems or a new full assessment require a separate engagement.
No verified finding? No charge.
This means no vulnerability was verified within the agreed scope at the time of testing. It is not an assurance of complete security.
PERSONALLY ACCOUNTABLE
You speak
with Artur.
Artur Hammerschmidt supports you from authorisation through to the retest. You receive understandable results and concrete next steps.
ah@escapeuniverse.deGOOD TO KNOW
Your key questions.
What exactly is tested?
Websites and web applications within the scope agreed in writing, including possible vulnerabilities and misconfigurations. Internal networks, third-party services and additional systems are not automatically included.
Does an AI test my website?
Yes. AI is the main tester and runs on our own infrastructure. You have a direct point of contact. Before testing, we explain how processing is organised and what data is used.
When do I pay?
Only for verified, fully documented and delivered vulnerabilities at the beta rates agreed beforehand. Unverified warnings and low-severity findings are free. The agreed cap is €1,250 net per assessment.
What happens with an urgent finding?
High and critical risk findings are reported immediately to your agreed emergency contact with actionable advice. This notification is not conditional on prior payment.
What does the retest include?
After you report remediation, we recheck the previously reported issue. This requires separate authorisation and a fixed six-month window from result delivery. It is not a continuous monitoring service.
Could testing affect my operations?
Testing can never be entirely risk-free. We agree on boundaries and timing. Denial-of-service attacks, data changes and tests with foreseeable operational disruption are excluded. Testing stops if signs of disruption appear and the emergency contact is informed.
Is my website guaranteed secure afterwards?
An assessment covers an agreed scope at a specific point in time. A result without verified findings is not a security guarantee. New vulnerabilities or issues outside the scope may remain undetected.
THE FIRST STEP
What should we
check for you?
Tell us your website. We first clarify scope and prerequisites. An enquiry is not test authorisation and does not create a payment obligation.
Prefer to email directly?
ah@escapeuniverse.deContact by email
The enquiry prepares an email draft. Nothing is sent automatically.