EVERY GATE. EVERY TOWER.01 — RECON
Pentest with Intelligent Swarms
Attackers now
come in hordes.
So do we.
Horda unleashes a swarm of agents against your perimeter, inside the scope you authorize, and delivers validated findings in 72 hours.
AI-DRIVEN. HUMAN-VALIDATED.
Meet Horda
HORDA / SIEGE 001
BUILT FOR TEAMS THAT CANNOT AFFORD A BREACH
Agent swarmAuthorized scope onlyHuman-validated findingsLGPD-ready reports
01 /A horde on your side
THOUSANDS OF AGENTS.ONE SCOPE.
Not a scan.
A siege.
Horda is a penetration testing platform powered by Super Intelligence. Instead of one consultant with a checklist, you get a coordinated swarm of autonomous agents that map your attack surface, chain weaknesses the way a real adversary would, and record evidence for every step. Senior pentesters review each finding before it reaches you.
Scope-bound by design
Relentless.
Never reckless.
Every agent action runs inside a consent-gated, rate-limited scope you authorize. Destructive actions are blocked at the tool boundary. Nothing crosses the walls you set.
- Authorized scope only, enforced at runtime
- Evidence encrypted at rest, every access audited
- Reports in English and Portuguese (LGPD / ANPD / BACEN)
02 /From first contact to final report
72 HOURS. FOUR MOVEMENTS.Seventy-two hours.
Zero guesswork.
A Horda engagement follows the same four movements a real intrusion does. You watch every one of them in the console, as it happens.
THE PLATFORM FILM / 1 MIN 28
A siege, from the first probe to the signed report.
How the swarm maps your walls, chains what it finds, proves each one with the evidence attached and leaves you a report you can act on. Console scenes show demo data.
Read the narration
Your last pentest was a slide deck. Your attackers never stopped. By 2026, nine in ten exploited flaws are hit the day they're disclosed. A once-a-year report defends a company that no longer exists.
Horda answers with a swarm — the instincts of elite pentesters, encoded and multiplied across thousands of agents. One console for your whole attack surface. Live. Every domain, every host, every API, tested the way an adversary would.
It doesn't hand you a list of maybes. It shows you the chain — the exact path an attacker takes to what matters. Every finding is reproduced, with the evidence attached, and reviewed before it reaches you. Proof, not probability.
Real exploitation, inside the scope you authorize. Consent-gated. Rate-limited. Destructive actions stopped at the tool boundary. Then a report you can act on and audit, and a retest of everything you fix. A full engagement in seventy-two hours. Exploited. Verified. Fixed. Horda. Not a scan. A siege.
Start Pentest
Your scopeHorda swarmValidated report
- PHASE 1 / RECONNAISSANCE
The swarm maps every wall.
Agents enumerate domains, services, APIs and identities across your authorized scope and build a shared exploration graph of your attack surface.
- PHASE 2 / ATTACK
Weaknesses get chained, not listed.
Agents plan and execute attack paths the way an adversary would: credential paths, logic flaws, misconfigurations and privilege chains, under rate and blast-radius limits.
- PHASE 3 / HUMAN VALIDATION
A senior pentester signs each finding.
Every finding is reproduced, rated and attested by a human reviewer, with the evidence trail attached. Unconfirmed results never reach your report.
- PHASE 4 / REPORT & RETEST
A report you can act on and audit.
Executive summary, technical detail, reproduction steps and remediation guidance in English and Portuguese, followed by a retest of what you fixed.
Threat landscape / 2026
The attackers
got a horde first.
In late September 2026 an unknown, financially motivated actor used an open-source agentic penetration-testing tool to breach multiple South Korean financial institutions within days, running on LLMs. One operator. Many intrusions. No team. Read CrowdStrike's analysis
2,300+critical and high CVEs in a single month of 2026
86.7%of exploited CVEs in 2026 were exploited on or before disclosure day
The patch window is gone.
When almost nine in ten exploited vulnerabilities are hit on day zero, waiting for a CVE to appear is waiting for the breach.
An annual pentest covers one month.
Your perimeter changes every sprint. A yearly report describes a fortress that no longer exists.
One operator is now a horde.
Agentic tooling lets a single actor run many intrusions in parallel. Defense has to scale the same way.
03 /Where the horde strikes
Every wall,
every gate.
Web applications and APIs, cloud and infrastructure, internal networks and mobile backends. If it is in scope, the swarm probes it the way an adversary would, and documents what it finds.
GATEHOUSE / WEB & API
Web apps & APIs
Authentication flows, business logic, injection, access control and API abuse, chained end to end.
RAMPARTS / CLOUD & INFRA
Cloud & infrastructure
Misconfigurations, exposed services, identity and privilege paths across AWS, GCP and Azure.
THE KEEP / INTERNAL & MOBILE
Internal & mobile
Lateral movement, internal services, mobile backends and the paths an insider would take.
HORDA / HUMAN REVIEW
Agents attack. Human verifies.
04 /Validated, not just generated
The swarm finds.
A human
confirms.
AI finds more, faster. It also hallucinates. Every Horda finding is reproduced and attested by a senior pentester before it enters your report, with evidence attached.
Reports come in English and Brazilian Portuguese, structured for LGPD, ANPD and BACEN requirements, with one fail-closed rule: nothing partial gets published.
Human reviewsEvidence EncryptedBACEN & LGPD Ready
Meet a Demo
Plans / Three ways to stay ahead
One siege.
Or a standing army.
Start with a full 72-hour pentest. Keep the swarm on your walls with monthly validation; the annual plan includes a Pentest 72h. Enterprises and governments get attack hours sized to their targets.
Pentest 72h
A complete AI-driven penetration test of your scope, with human-validated findings in 72 hours.
US$ 3,990 / engagement
72 hours of continuous swarm testing
What you get
Full report in 72 hours
Executive summary, technical findings with reproduction steps, evidence, remediation guidance and a retest window.
- Web, API, cloud and internal scope
- Senior pentester review on every finding
- Report in English and Portuguese
- Retest of fixed findings
Constant Siege
Continuous validation against new threats and zero-days: 6 hours of swarm testing every month.
US$ 599 / month
6 hours of swarm testing per month 1.5h per week
What you get
Zero-day re-checks
Every month the swarm re-runs your scope against newly disclosed CVEs and attack techniques, re-validates fixed findings and flags drift.
- Monthly validation report
- New CVE and zero-day re-checks
- Drift and regression alerts
- Priority scheduling for retests
Enterprise & Government
For critical infrastructure, defense entities and high-value targets that need a dedicated offensive team.
Custom / attack-hour package
Custom hours of swarm testing, sized to your targets 24/7/365 option
Contact SalesWhat you get
Forward Deployed SecOps (FDS)
A dedicated Forward Deployed SecOps Engineer embedded with your team, steering the swarm against your highest-value targets, with round-the-clock coverage for defense entities.
- Attack-hour packages per target
- 24/7/365 siege for high-value targets
- Dedicated FDS engineer
- SOC 2, ISO 27001, GDPR and LGPD compliance
- Data Processing Agreement (DPA)
- Private Slack channel
- 5-year encrypted data retention
Prices in USD. Constant Siege is billed monthly or yearly; the annual plan includes a Pentest 72h. Enterprise & Government is quoted per attack-hour package. Taxes not included. Scope is confirmed on the call.
Before the siege
Good question.
Here goes.
What teams ask us
before the first engagement.
What is Horda?
Horda is an AI-powered penetration testing service by NoBuzz. A swarm of autonomous AI agents attacks your systems inside a scope you authorize, and senior penetration testers validate every finding before it reaches your report. A full pentest takes 72 hours; Constant Siege keeps testing against new CVEs and zero-days.
Is it safe to run against production?
Yes, when you want it to be. Every agent action is bound to the scope you authorize and runs under rate limits, blast-radius limits and a destructive-action block enforced at the tool boundary. Many customers start on staging and move to production once they trust the limits.
What do I need to provide?
A written scope (domains, IPs, applications, cloud accounts), a signed authorization and a point of contact. Credentials for authenticated testing are optional and make the engagement deeper.
How is this different from a vulnerability scanner?
A scanner lists known CVEs. Horda chains weaknesses into real attack paths, exercises business logic and access control, and every finding is reproduced by a human before it reaches you.
How is Horda different from a traditional pentest?
A traditional pentest is a consultant-led, point-in-time engagement that often takes weeks to schedule and deliver. Horda runs thousands of agents in parallel, delivers a validated report in 72 hours and can re-test every month, while senior pentesters still review every finding.
How much does an AI pentest with Horda cost?
Pentest 72h costs US$ 3,990 (R$ 19.990 in Brazil) per engagement. Constant Siege costs US$ 599 (R$ 2.990) per month, billed monthly or yearly, with 6 hours of swarm testing every month; the annual plan includes a Pentest 72h. Enterprise & Government is quoted per attack-hour package, with a 24/7/365 option. Taxes are not included, and scope is confirmed on a 30-minute call.
Who validates the findings?
Senior penetration testers. Each finding carries a reviewer attestation and an evidence trail, and the report refuses to publish anything that was not confirmed.
Do you deliver reports for LGPD, ANPD or BACEN?
Yes. Reports are available in English and Brazilian Portuguese and structured so your compliance team can map findings to LGPD, ANPD guidance and BACEN requirements.
How fast can we start?
Send a request from the Start Pentest page, or talk to sales on a 30-minute call. We confirm scope and authorization, and the 72-hour clock usually starts within a week.
