Kontinuerlig pentest, hantverksmässigt avslutad
Vi scannar er externa angreppsyta varje dygn med 30+ verktyg, verifierar varje fynd mot er live-miljö, och avslutar med en LLM-driven granskning som plockar bort skitsnacket. Det som hamnar i rapporten har överlevt tre filter.
Hostat i Stockholm. GDPR Art. 28-DPA på begäran. Org.nr 556227-6351.
39 fynd togs bort längs vägen, varav 4 markerades som false positives av vår FP-lärande motor. Resten var dubletter, redan kända eller helt täckta av annan kontroll.
Metoden
Skillnaden mot en vanlig sårbarhetsskanner ligger inte i fler verktyg, den ligger i vad som händer efter scannet. Tre av stegen tar bort fynd. Ett enda lägger till.
nuclei, subfinder, httpx, naabu och ~25 verktyg till körs mot er externa angreppsyta. Vi använder de verktyg som faktiskt fungerar för stacken, inte allt på en gång.
Tar bort ingenting. Bygger råmaterial.
Varje fynd dubbelkollas mot er live-miljö med HTTP-self-tests, snapshot-jämförelse, och globala FP-mönster. Dubletter merges, kända FP markeras.
Tar bort ~70 % av råfynden.
En Opus-driven granskning läser scan-datat med scope-medvetenhet och evidence-grunding, hittar coverage-gaps och nedgraderar svaga signaler. Operatör läser och godkänner.
Lägger ibland till. Tar oftare bort.
Slutprodukten är en kort, prioriterad lista i dashboarden eller som månadsmail. Inget "Critical: missing X-Frame-Options". Bara saker värda att åtgärda.
Levereras. Klart.
Our products
Removes duplicates, FP and noise so what ends up in the report is worth reading. Takes 47 raw findings down to 8.
Read more14 tools over the Model Context Protocol. Claude Code and Cursor trigger scans and fetch findings right from chat.
Read moreMaturity assessment against NIST CSF 2.0, NIS2 and CRA. Workshops, report, prioritized roadmap. Delivered as a project.
Read morePricing
14 days free, no credit card. Standard fits most customers. Guarantee: if we find nothing in 30 days, full refund.
Comparison
Actual features, not claims. Things actually listed on competitor pricing pages as of May 2026.
| Service | Daily | AI verif. | Swedish | EASM | Monitoring | Price |
|---|---|---|---|---|---|---|
| Pentesting.se | ✓ | ✓ | ✓ | ✓ | ✓ | 249 SEK |
| Aikido | ✓ | ✓ | — | ✓ | — | fr €300/mån |
| Detectify | ✓ | — | ✓ | ✓ | ✓ | fr $275/mån |
| Intruder | — | — | — | — | — | fr $172/mån |
| Pentest-Tools | — | — | — | — | — | fr $85/mån |
| Qualys | ✓ | — | — | ✓ | — | Custom |
Frequently asked
EASM continuously maps and monitors externally exposed IT assets: domains, subdomains, IPs, ports, web applications, and cloud services. The point is to find vulnerabilities before an attacker does.
The difference is not more tools, but three filters after the scan: cross-tool correlation, verification against your live environment, and an LLM-driven review that cleans and complements. What ends up in the report has survived three filters, not the raw scan.
Findings are automatically mapped to the NIS2 Directive, ISO 27001 Annex A, and OWASP Top 10. Compliance reports can be generated directly from the dashboard. Premium plan includes a signed attestation.
Yes. REST API, Prometheus metrics, and an MCP server (Model Context Protocol) that works with Claude Code, Cursor, and other AI assistants. Trigger scans and fetch results programmatically.
All data is hosted on servers in Sweden (Stockholm). No US Cloud Act exposure. GDPR Art. 28 DPA available on request. Org.nr 556227-6351, Adminor AB.
Articles
NIS2 doesn't mention "pentest" verbatim, but art. 21 points e and f make penetration testing de facto best practice. We go through exactly w…
The NIS2 directive came into force in Sweden on 1 January 2025 via the Cybersecurity Act. 27,000 Swedish organizations are now covered, many…
Price guide for pentest in Sweden 2026, automated scanning, web app test, network test, red team. We share concrete price ranges from the Sw…
One domain, two minutes, no credit card. We show you what the first scan found, and what survived our three filters.
Adminor AB · Swedish IT security since1983 · Org.nr 556227-6351