Question 1

Is AI Pentest free to use?

Accepted Answer

Yes. AI Pentest runs in your browser with no install. Passive scans and rule-based active command generation are completely free; adding a free Groq API key enables AI-generated commands and report summaries.

Question 2

What does the passive scan check?

Accepted Answer

It inspects TLS certificates (via Certificate Transparency logs), DNS and email authentication (SPF, DMARC, DNSSEC, CAA, MX), domain registration and expiry (RDAP), and HTTP security headers, then scores the target against 175+ risk rules.

Question 3

Does active mode run real exploits?

Accepted Answer

No. In the browser, active mode only generates and safety-validates a command (dry-run). Real tool execution (nmap, gobuster, sqlmap, nikto) requires the optional owner-configured backend and explicit authorisation.