Scan, analyze, understand, fix. The AI step is what makes it different.
Add domains, IPs, or CIDR ranges as targets. Organize subdomains under parent domains. PTK tracks your entire attack surface across every scan.
Choose a preset or pick specific tools. Run single scans, bulk scan 500 targets at once, or schedule recurring checks automatically with cron.
Every scan automatically generates a plain-language briefing — what was found, why it matters, and exactly what to fix first. No digging required.
Get copy-paste fix instructions per finding. Mark findings as resolved. Watch your security score improve over time. Export professional reports.
Every scan produces intelligence, not just data. Four AI layers built directly into the platform — no add-ons, no extra cost, no setup.
Every tool pre-integrated, producing structured findings you can act on. Intelligence tools run passively — no traffic sent to your target.
Template-based vulnerability scanning — 7,000+ templates
Web server misconfiguration & vulnerability scanning
HTTP probing, tech fingerprinting & redirect analysis
Web Application Firewall detection — 180+ vendors
HTTP security headers analysis — graded A through F
CORS misconfiguration detection
Cross-site scripting detection with parameter discovery
Web technology fingerprinting & version detection
When you download a PDF, CSV, or JSON report, the AI analysis comes with it — plain-language summaries, priority actions, and fix instructions per finding. Share with your client without rewriting anything.
Upload a list of targets or paste them directly. PTK fans out across Celery workers in smart batches — fast tools run immediately, slow tools queue intelligently. Watch per-target progress in real time.
Schedule scans with cron — daily, weekly, monthly, or custom. Get email alerts on new critical findings. Your dashboard explains what changed and why, every morning.
Group subdomains under their parent domain. Every target gets its own score, finding history, and scan timeline. Discover subdomains and bulk-scan them in two clicks.
SubMapper discovers, organizes, and bulk-scans your entire subdomain landscape automatically — passively, with no traffic sent to your target.
We're honest about the tradeoffs. The AI layer and price point are where PTK is genuinely different.
| Feature | Pentoolkit | Intruder | Pentest-Tools | Astra |
|---|---|---|---|---|
| Free to start | ✓ Yes | ✗ Paid only | Trial only | ✗ Paid only |
| Cost | Free plan | $260–2,880/yr | Credit-based | $1,999+/yr |
| AI scan insights | ✓ Built-in | Partial | ✗ | ✗ |
| AI remediation | ✓ Per-finding | ✗ | ✗ | ✗ |
| AI daily briefing | ✓ Yes | ✗ | ✗ | ✗ |
| AI in reports | ✓ Yes | ✗ | ✗ | ✗ |
| Raw tool output | ✓ Full access | ✗ Hidden | Partial | ✗ Hidden |
| Full tool config | ✓ Full | Limited | Limited | Limited |
| Bulk 500 targets | ✓ Yes | Limited | Limited | Limited |
| Subdomain discovery | ✓ Built-in | ✗ | ✗ | ✗ |
| Scheduled scans | ✓ Yes | ✓ Yes | ✓ Yes | ✓ Yes |
| PDF reports | ✓ Yes | ✓ Yes | ✓ Yes | ✓ Yes |
| Team collaboration | Roadmap | ✓ Yes | ✓ Yes | ✓ Yes |
| Compliance reports | Roadmap | ✓ Yes | Partial | ✓ Yes |
Not a compliance checkbox. A working tool for working security professionals.
You run port scanners, vulnerability scanners, and subdomain mappers separately and lose track of findings. PTK gives you one place for everything — plus AI that writes the briefing so you don't have to.
Your company has 50 domains and needs continuous monitoring. PTK runs scheduled scans, AI explains what changed each week, and your score trend proves security is improving over time.
You scan client assets and need professional deliverables. PTK organizes targets by client, AI writes the finding explanations, and PDF reports include remediation steps clients can follow.
No installation. No configuration. Open your browser, start scanning, get AI insights.
Sign up in seconds. No credit card required. Your account is ready immediately.
Add domains, IPs, or CIDR ranges. Organize them into groups by client or project.
Pick a preset, launch. Results appear in real time. AI analysis starts automatically.
AI explains every finding — what it means, why it's dangerous, and how to fix it.