# Watira.ai Offers AI Penetration Testing

Watira.ai is offering a paid AI penetration-testing service built on PentestGPT, an open-source research framework. The commercial offering packages hosting, setup, an interface, and operational support—services that may be easier for government buyers and contractors to procure than to build internally. However, the PentestGPT founder reportedly describes the framework as a research prototype, and the provider’s Microsoft Teams security questionnaire reportedly indicates it has no external firewalls. Buyers should assess the service’s security controls, data handling, model-access and licensing terms, resale permissions, authorized testing boundaries, and human oversight before relying on it for security testing.

- Procurement teams evaluating the service should validate its security architecture and data-handling practices, including the reported absence of external firewalls.
- Buyers should confirm that the provider’s rights to use PentestGPT and underlying models permit the proposed commercial use and any resale or customer access arrangement.
- Contractors and agencies should define authorization boundaries and human oversight for testing activity; the signal notes that AI can cover more ground quickly while a human remains in the loop.
- CrowdStrike’s SafeMind is mentioned as a potential comparable offering, but the signal provides no contract details or comparative performance information.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Artificial Intelligence
**Published:** November 11, 2026

### Vendors
- Watira.ai (AI penetration-testing service provider)
- CrowdStrike (Developer of the SafeMind offering, mentioned as a potential comparable service)

### Key Quotes
> As I understand it, however, their sub-account permissions may not be embedded in products or resold to customers. The terms and fine print need to be checked.
> — Community commenter

> PentestGPT is NOT a product, solely a research prototype | Scams all over the place
> — Original poster (quoting the PentestGPT founder)

> The advantage is that AI can cover more ground much faster, but I still keep a human in the loop.
> — Community commenter (penetration-testing service provider)

### Sources
- [Vendor offering Pentestgpt as a service](https://www.reddit.com/r/cybersecurity/comments/1xtaovn/vendor_offering_pentestgpt_as_a_service) - reddit-cybersecurity