Hacktron
AI security platform that reviews pull requests for vulnerabilities and runs source-aware penetration tests.
Hacktron is an AI-based security platform for code review and penetration testing. Hacktron connects to a team's Git hosting, scans each pull request for vulnerabilities, validates what it finds and prepares fixes. Separate services cover whitebox penetration tests that use source-code context and continuous red teaming at the organisation level.
Best for Engineering and security teams that want vulnerabilities checked and triaged inside the pull request workflow before code is merged.
- Listed in
- AI Code AssistantDevOps & Monitoring
- Platforms
- Web
- Pricing model
- Subscription
- Free trial
- Yes
- Made by
- Hacktron AI
- Added
Last verified: . Information taken from hacktron.ai.
What is Hacktron?
Hacktron is an AI-based security platform for code review and penetration testing. Its work is grouped into three levels. For code security, a review product inspects pull requests, confirms which vulnerabilities are real and aims to keep noise low for developers. For product security, a whitebox pentest pairs knowledge of the source code with active testing to show how weaknesses spread across services could be chained into a breach. For organisation security, continuous red teaming plays the part of a persistent attacker. The pull request product is sold per developer on a Pro plan that includes auto-triage, autofix and threat models that adjust to triage feedback, and it integrates with GitHub, GitLab, Bitbucket and Azure DevOps. An Enterprise tier adds custom rules per repository, single sign-on, audit logs and role-based access.
Key Features
Pull Request Review
Scans each change for security flaws before it is merged, with no cap on scans for a given pull request.
Auto-Triage and Autofix
Verifies findings and prepares tested fixes so developers are handed confirmed issues rather than raw alerts.
Adaptive Threat Models
Updates its model of the codebase's risks from the feedback teams give while triaging results.
Whitebox Pentest
Combines source-code context with active testing to trace how separate weaknesses could lead to a compromise.
Continuous Red Teaming
Simulates a persistent adversary against the organisation rather than a one-off assessment.
Git Platform Integrations
Works with repositories hosted on GitHub, GitLab, Bitbucket and Azure DevOps.
Use Cases
- Security Gate on Pull Requests
- Check every change for exploitable issues as part of normal code review.
- Reducing Alert Noise
- Have findings validated automatically so the team only spends time on confirmed problems.
- Pre-Release Penetration Test
- Assess a product with a source-aware test before a launch or audit.
- Open Source Maintenance
- Maintainers of open source projects can use the review product without charge.
- Enterprise Rollout
- Apply repository-specific rules and connect the platform to an existing security toolchain.
Things to know
- Per-developer plan with a PR allowance
- The Pro plan is billed per developer and includes 50 pull requests each; further pull requests are charged individually.
- Trial and open source terms
- The Pro plan begins with a 14-day trial without a credit card, and open source projects are not charged.
- Pentest and red teaming by enquiry
- The site presents whitebox pentests and continuous red teaming alongside a contact option rather than a self-serve checkout.
- Site languages
- The website is available in English, Spanish, French, German and Portuguese.
FAQs
What is Hacktron?
Hacktron is a security platform that uses AI to review code and carry out penetration tests. Its purpose is to locate exploitable flaws in a team's software and get them fixed.
What is Hacktron used for?
Hacktron is used to review pull requests for security flaws, to run whitebox penetration tests against products and to carry out continuous red teaming of an organisation.
Is Hacktron free?
Hacktron is free for open source projects, and its Pro plan starts with a 14-day trial that does not require a credit card. For current paid rates, see the pricing section of the official site.
Which code hosting platforms does Hacktron support?
Hacktron integrates with GitHub, GitLab, Bitbucket and Azure DevOps.
Does Hacktron fix the vulnerabilities it finds?
Hacktron's Pro plan includes auto-triage and autofix, which verify findings and prepare tested fixes for the team to review.
What does Hacktron's Enterprise plan add?
Hacktron Enterprise adds custom rule configuration per repository, custom integrations with existing security tools, SSO, audit logs, role-based access controls and round-the-clock priority support, at custom pricing.
Who it's for
- Security engineers
- Software developers
- Engineering managers
- Open source maintainers
- Enterprises
Comments
No comments yet. If you have used Hacktron, tell other readers how it went.
Alternatives to Hacktron
| Tool | Free plan | Starting price | API |
|---|---|---|---|
 ApplitoolsAI-augmented testing platform that validates how web and mobile interfaces look and behave using Visual AI. |
— | — | — |
 BrowserStackCloud testing platform for websites and mobile apps on real browsers and devices, with AI agents across the test cycle. |
— | — | — |
 CodeRabbitAI code review that comments on every pull request, with PR triage, change explanations and security monitoring. |
Yes | — | Yes |
 GreptileAI code review agent that indexes a repository and comments on pull requests with whole-codebase context. |
Yes | — | — |
 Sauce LabsCloud testing platform that uses AI agents to write, run and analyse web and mobile tests on real and virtual devices. |
— | — | Yes |
Listed in the same categories as Hacktron. A starting price appears only where we checked it on the maker’s pricing page; a dash means not checked or not published. All AI Code Assistant tools