OpenHack
AI security engineer: scans code and reviews pull requests for vulnerabilities, runs autonomous pentests, validates findings by building a working proof of concept in a sandbox or browser, prioritizes by CVSS and business impact, scans for secrets and malicious dependencies, and prepares fix pull requests, including from a Linear ticket; an open-source CLI runs locally with any model; free pay-as-you-go tier with 5 free pull request reviews a month, enterprise by custom quote.
What it does
- Threat detection and response
- Code review
Features 6
- Verified findingsBuilds a working proof of concept before it reports a vulnerability.
- Autonomous pentestsScans code, runs pentests and prepares fix pull requests.
- Fix by pull requestAssign a ticket to OpenHack and get a fix back as a pull request.
- Open-source CLIRuns scans locally with direct control over scans and models.
- Any modelUse any AI model in the CLI and connect any provider.
- Business-logic flawsFinds IDORs, race conditions and authentication bypasses and chains them.
Sources
- Pricing
-
Pricing page: a Free (Pay as you go) plan at $0 with 1 project and 5 free pull request reviews a month, and an Enterprise plan at custom pricing; per-review rates are not published on the pages read.
- Description
-
Official documentation · 18 Oct 2026
Home page FAQ: "OpenHack is your Always on AI Security Engineer. It finds, verifies, prioritizes, and fixes vulnerabilities across your codebases and live applications."
- What it does
-
Official documentation · 18 Oct 2026
Home page FAQ: "OpenHack is your Always on AI Security Engineer. It finds, verifies, prioritizes, and fixes vulnerabilities across your codebases and live applications."
- Constraints
-
Official documentation · 18 Oct 2026
Derived from the security facts on this page, from the same source.
- Security
-
Official documentation · 18 Oct 2026
Home page FAQ: the managed platform uses zero data retention inference; pricing page: Enterprise lists SSO and SAML, audit logs and advanced role-based access control; no certification report is named on the pages read, so none is recorded; vendor claims.
- Sold within
-
Free sign-up with 5 free pull request reviews a month; Enterprise by contact.
- Name
-
Official documentation · 18 Oct 2026
Name as published on the product page.
- URL
-
Official documentation · 18 Oct 2026
Product page, read 2026-10-18.
- Deployment
-
Official documentation · 18 Oct 2026
Pricing page: Enterprise lists "Custom data residency and on-premise deployment"; home page FAQ: "The open-source CLI runs locally".
- Interfaces
-
Official documentation · 18 Oct 2026
Home page: a Sign in link to the web platform and the open-source CLI described in the FAQ.
Open OpenHack in the directory
Something wrong here? Send a correction — quote this product id: openhack-security-engineer.