Hours are imported from OpenProject, internally reviewed, and only approved hours become billable items in WHMCS. You see the same numbers we see, in real time.

Yes -- with the termination notice period defined in your Master Agreement (default 30 days). All work in flight finishes; the SOW is closed out cleanly.

What happens if scope changes?

Any change > the change-order threshold (default 100% of approved hours) triggers a Change Order that you re-approve via signed link before any additional work is billed.

You do. Deliverables, source code, designs, documentation -- all assigned to you on signed acceptance per the Master Agreement.

How fast do you respond?

Communication SLA defaults to 4 business hours during stated business-hours window. Tracked + auditable in the SLA tab.

What is a Master Agreement?

A single MSA / NPA / retainer contract that sits ABOVE all your SOW projects. One signature governs many engagements; per-agreement compensation overrides apply automatically.

Carrello

Self-hosted · AI-powered autonomous security

Stop guessing.
Start proving.

Praetorian is a fully-managed, AI-driven security platform that turns 23 autonomous pentest agents and 50+ professional scanners loose on your attack surface — then proves every finding with a CVSS score, a MITRE ATT&CK technique and remediation steps. All AI runs on our own GPU cluster, so your scan data never leaves our network.

Autonomous AI agents

Security scanners

Scan types

Compliance frameworks

100%

Self-hosted AI

Why Praetorian is different

Most scanners hand you a list of maybes. Praetorian runs a real, AI-driven red team and backs every finding with proof.

Self-hosted AI, zero data exfiltration

Every AI agent runs on our own 7-GPU cluster behind a private gateway. Your targets, findings and scan data never touch a third-party cloud API — unlike SaaS scanners that ship it all to OpenAI.

23 agents, a real red team

A coordinated fleet of 23 specialised agents runs recon → active scanning → deep analysis → synthesis, then an Orchestrator correlates findings into multi-step attack chains with a 0–100 risk score.

Proof, not probability

Each finding is enriched deterministically with a CVSS score, concrete remediation and a MITRE ATT&CK technique — reproducible even when the AI is offline. No vague “medium severity” hand-waving.

Compliance on autopilot

Findings are scored against 12 regulatory frameworks — PCI-DSS, SOC 2, HIPAA, ISO 27001, NIST CSF and 7 more — with per-control pass/fail, so audit prep starts halfway done.

Full-spectrum security operations

One platform replaces a rack of point tools — scanning, pentesting, compliance and monitoring, all under your brand.

Autonomous AI pentesting

23 specialised agents select tools, run scans, chain attacks and validate exploitability — no analyst required.

CAI multi-agent

Self-hosted AI intelligence

7 specialised models routed through a private LiteLLM gateway on dedicated GPU infrastructure (77 GB VRAM).

LiteLLM + Ollama

56-scanner arsenal

nmap, nuclei, sqlmap, trivy, trufflehog, ffuf, dalfox and 49 more — pinned, containerised, always current.

50+ tools

Validated findings

Every finding carries a CVSS score, a MITRE ATT&CK technique and step-by-step remediation guidance.

CVSS + ATT&CK

Vulnerability management

Full lifecycle: discover, validate, track, remediate, verify — deduplicated across scans with trend analysis.

Lifecycle

Secret & credential scanning

Hunt leaked API keys, tokens and passwords across git history, configs and code before attackers do.

TruffleHog + gitleaks

Container & IaC security

Scan Docker images, Kubernetes manifests and Terraform for CVEs and misconfigurations before they ship.

Trivy + Checkov

Network & web assessment

Port and service discovery, DNS auditing, subdomain enumeration and full web-app testing across your perimeter.

Recon → Web

12-framework compliance

Continuous control mapping and pass/fail scoring with exportable, audit-ready reports.

PCI · SOC 2 · ISO

Self-learning engine

A tenant-isolated vector store learns from every scan and your own triage to sharpen tool selection over time.

Adaptive

SIEM & SOC integration

Export findings as CEF, JSONL or CSV, and push straight into TheHive, Wazuh, Slack or any webhook.

CEF / JSONL / CSV

White-label & WHMCS-native

A 16-tab security portal lives right in your client area, with per-tenant branding — your clients see your brand.

MSP-native

35 scan types. Every attack surface covered.

From a 30-second DNS check to a full autonomous red-team campaign — on demand or on a schedule.

Starter & up

Recon Web application DNS audit Secret detection URL discovery SSL / TLS

Professional & up

Network Container Dependency / SCA SAST WordPress / CMS Server hardening Threat intel

Enterprise

Full assessment Autonomous red team Exploit validation Code audit Cloud IaC Active Directory Adversary emulation Endpoint & malware

Built for compliance

Every finding is automatically mapped and scored against 12 regulatory frameworks.

PCI-DSS SOC 2 HIPAA ISO 27001 NIST CSF CIS CMMC HITRUST GDPR NIST 800-171 FedRAMP CCPA

From signup to proof in minutes

No security hire, no agents to install, no consoles to babysit.

Add your targets

Enter the domains, IPs or CIDR ranges you own or are authorised to test. The platform validates and organises your attack surface.

Pick a scan

Choose from 35 scan types — from quick recon to full red-team — and run it on demand or on a recurring schedule.

AI agents go to work

23 autonomous agents scan, correlate and validate vulnerabilities, then chain them into attack paths with a risk score.

Act on results

Review findings in your portal, export audit-ready compliance reports, or push to your SIEM and ticketing via API.

Your security command center

A 16-tab security portal lives right inside your account — posture, scans, findings, compliance and AI pentests in one place.

praetorian-security · client portal

ASecurity grade

128Targets

3Critical

96%PCI ready

Plugs into your stack

Findings flow straight into the tools your team already runs — no rip-and-replace.

Splunk Elastic / ELK ArcSight TheHive Wazuh Slack Webhooks REST API

Choose your plan

Transparent month-to-month pricing — upgrade, downgrade or cancel any time.

Praetorian Starter

$49.00 USD / monthly

Starter

Essential AI-driven security for small teams and solo MSPs. Continuous, hands-off vulnerability monitoring — no dedicated security hire required.

What’s included

5 monitored targets
10 automated scans / month
Web-focused scan types — recon, web app, DNS, secrets, SSL/TLS
Every finding CVSS-scored & mapped to MITRE ATT&CK
All 12 compliance frameworks
Weekly scheduled scans + email alerts
30-day finding history

Best for freelancers and small teams who want always-on monitoring on a starter budget.

Order Praetorian Starter

Praetorian Professional

$149.00 USD / monthly

Praetorian Enterprise

$499.00 USD / monthly

Enterprise

Autonomous AI red teaming with zero limits. Everything in Professional, plus the full 23-agent red team and audit-ready compliance.

What’s included

Unlimited targets & scans
Full 23-agent autonomous red-team campaigns
All 35 scan types — incl. cloud, IaC, AD & adversary emulation
10 concurrent AI sessions + top scan priority
White-label branding (logo, colours, domain)
TheHive & Wazuh SOC integration
Audit-ready reports across all 12 frameworks
Dedicated engineer + 24/7 priority support

Best for enterprises and MSSPs needing continuous offensive testing with audit evidence.

Order Praetorian Enterprise

Compare the plans

Every tier includes CVSS-scored findings, MITRE ATT&CK mapping and all 12 compliance frameworks. Higher tiers add scale, scan depth and autonomy.

Feature	Starter	ProfessionalMOST POPULAR	Enterprise
Monitored targets	5	25	Unlimited
Scans / month	10	100	Unlimited
Toolset	Web-focused	Full toolset	Full + custom
Scan scheduling	Weekly	Daily / continuous	Continuous
Concurrent AI-pentest sessions	1	3	10
Autonomous AI red team	—	—	✓
Compliance frameworks	12	12	12
Remediation guidance	✓	✓	✓
Slack & webhook alerts	—	✓	✓
SIEM export (CEF / JSONL / CSV)	—	✓	✓
REST API access	Limited	Standard	Unrestricted
White-label branding	—	—	✓
Finding history	30 days	1 year	Unlimited
Support	Email	Standard	24/7 priority

Frequently asked questions

What exactly is Praetorian AI Security?

It’s a fully-managed security platform that continuously scans your domains, servers and applications for vulnerabilities, runs autonomous AI-driven penetration tests, and maps every finding to compliance frameworks — all from a portal inside your account. There’s nothing to install: add a target and your first scan runs in minutes.

How is this different from a Nessus or Qualys subscription?

Traditional scanners give you a long list of “possible” issues. Praetorian runs 23 autonomous agents that actively validate findings, chain them into real attack paths, and attach a CVSS score, MITRE ATT&CK technique and remediation to each one — so you fix what matters, not chase false positives. And the AI runs on our own infrastructure, not a third-party cloud.

Where does my scan data go?

It stays on our infrastructure. All AI analysis runs on self-hosted models on our own GPU cluster via a private gateway — your targets, findings and reports are never sent to OpenAI or any external AI provider. Every tenant is fully isolated from every other.

Do I need a security team to use it?

No. Praetorian is built to run hands-off: scans are scheduled automatically, the AI does the analysis, and every finding comes with plain-language remediation steps. It’s designed for teams that need real security coverage without hiring a dedicated pentester.

What can I scan?

Any domain, IP address or CIDR range you own or are explicitly authorised to test — web apps, APIs, servers, DNS, containers and code repositories. The platform refuses to scan private, loopback or cloud-metadata addresses, and you confirm authorisation when you add each target.

Which compliance frameworks are covered?

All 12 are included on every plan: PCI-DSS, SOC 2, HIPAA, ISO 27001, NIST CSF, CIS, CMMC, HITRUST, GDPR, NIST 800-171, FedRAMP and CCPA. Findings are mapped to specific controls with pass/fail status and exportable, audit-ready reports.

Can I integrate it with my existing tools?

Yes. Professional and Enterprise plans export findings as CEF, JSONL or CSV for any SIEM (Splunk, ELK, ArcSight), send real-time alerts to Slack and webhooks, and offer a REST API. Enterprise adds turnkey TheHive and Wazuh integration for full SOC workflows.

Can I change plans or cancel anytime?

Absolutely. Every plan is month-to-month — upgrade, downgrade or cancel whenever you like, and your limits adjust automatically at the start of the next cycle.

Ready to stop guessing and start proving?

Spin up continuous, AI-driven security in minutes. Month-to-month, cancel any time.

Choose your plan Talk to an engineer

Stop guessing.Start proving.