XHack Logo
XHack
Sign upLogin
Platform features

Everything the platform
actually does

The agent, the console, the scanners and the AI tooling, documented one capability at a time. No screenshots of a roadmap, only what ships today.

Take the platform tourBrowse products

0

Documented capabilities

0

Capability areas

0h

Hours a day the agent runs

All (44)
Ai capabilities (7)
Platform (10)
Security platform (5)
Security services (4)
XHack AI (18)
Featured

Autonomous Penetration Testing

XHack AI performs fully autonomous penetration testing — discovering attack surfaces, identifying vulnerabilities, crafting exploits, and generating professional reports without human intervention.

Read more
Featured

Autonomous Web Browsing

XHack AI's autonomous browsing engine controls a real browser to navigate websites, interact with applications, discover vulnerabilities, and extract intelligence — all without human guidance.

Read more
Featured

Exploit Development

XHack AI assists with the full exploit development lifecycle — from vulnerability analysis through proof-of-concept creation, payload crafting, and weaponization for authorized security assessments.

Read more

SOC Operations

XHack AI transforms Security Operations Center workflows with AI-powered threat hunting, real-time incident response, log analysis, malware triage, and automated detection rule generation.

Read more

Threat Intelligence

XHack AI provides real-time threat intelligence research, IOC analysis, threat actor profiling, MITRE ATT&CK mapping, and automated intelligence report generation for security teams.

Read more

Malware Analysis

XHack AI performs static and dynamic malware analysis — deobfuscating scripts, reversing binaries, extracting IOCs, classifying samples, and generating YARA detection rules.

Read more

Red Team Operations

XHack AI assists with red team engagement planning, custom tooling development, social engineering assessment design, and adversary emulation for comprehensive security validation.

Read more
Featured

Unrestricted AI

Unrestricted AI agent for authorized security professionals — uncensored exploit development, payload generation, and agentic pentesting, backed by full audit trails.

Read more
Featured

Bring Your Own Key (BYOK)

Connect your own OpenAI, Claude, Gemini, GLM, Mistral, or xAI key — or an OpenRouter catalogue key — pick the exact model behind every chat and agent run, and keep working inside XHack's engine. Keys are encrypted, never shown, and fully under your control.

Read more
Featured

Autonomous Security Agent

XHack AI operates as a fully autonomous security agent — set an objective and it plans, executes, adapts, and reports independently across complex multi-step security operations.

Read more

Local AI with Ollama (Desktop Agent)

Run the XHack Agent entirely on your own machine by connecting a local Ollama model — no data leaves your network, no per-token cost, and full operation in air-gapped and classified environments.

Read more
Featured

AI Skills — Reusable Expertise Packs

Import and activate curated skill packs — offensive AD, cloud, web, recon, exploit-dev and more — that focus the AI on a specific discipline. Stack them within a token budget, toggle them on and off, and get sharper output on the work that matters.

Read more

Internet Access & OSINT

XHack AI has full internet access for real-time OSINT gathering, threat research, vulnerability database queries, and live reconnaissance during security assessments.

Read more

Full API Access

XHack AI provides comprehensive API access for programmatic security automation, CI/CD integration, custom workflows, and building security tools on top of the XHack platform.

Read more
Featured

Image Reading (OCR)

Drop a screenshot, scan, or PDF into XHack and the AI reads the text straight out of it — a captured request, a vulnerability report, a whiteboard photo — and works with it immediately. No retyping, no copy-paste.

Read more

Chat Access

Access XHack AI directly through the browser-based chat interface at xhack.io — no installation required. Full AI-powered cybersecurity assistance from any device.

Read more

24/7 Expert Support

Every XHack subscription includes access to dedicated security researchers and 24/7 expert support for tool configuration, engagement planning, and technical guidance.

Read more
Featured

GitGuard — AI-Powered GitHub PR Protection

Connect your GitHub repositories and let GitGuard automatically scan every pull request for security vulnerabilities before code reaches your main branch. No data stored. No noise. Just real protection.

Read more
Featured

Vulnerability Assessment — Scan, Analyse, and Act

Register your company assets, run AI-driven vulnerability scans, watch results come in live, and generate actionable reports and mitigation plans for your developers and security team — all from one platform.

Read more
Featured

SOC Dashboard — AI-Driven Threat Detection and Response

Centralise your security logs and events in one AI-powered dashboard. Detect threats in real time with custom detection rules, attack chain correlation, alert stacking, incident management with SLA tracking, and integrations with Cloudflare, Wazuh, and more.

Read more
Featured

AI Probe — Adversarial Security Testing for AI Systems

Test your AI systems against 3500+ attack payloads across OWASP LLM Top 10 categories. Detect prompt injection vulnerabilities, data leaks, jailbreaks, and safety failures before attackers exploit them.

Read more

Cloud Investigation, Fully Autonomous Forensic Investigation

Fully autonomous forensic investigation for your cloud and SaaS logs. Upload your audit logs, tell us what you suspect, and an AI investigator works through every file on its own to reconstruct who got in, how, what they touched, and whether they are still there.

Read more
Featured

VAPT Services

XHack provides certified Vulnerability Assessment and Penetration Testing services — identifying security weaknesses across networks, web applications, APIs, and cloud infrastructure.

Read more

Red Teaming Services

XHack's red team services simulate real-world adversary attacks to test your organization's detection, response, and resilience capabilities across people, processes, and technology.

Read more

SOC Services

XHack provides managed Security Operations Center services with 24/7 monitoring, threat detection, incident response, and continuous security improvement for organizations of all sizes.

Read more

GDPR & Compliance

XHack helps organizations achieve and maintain compliance with GDPR, PCI DSS, HIPAA, SOC 2, and ISO 27001 through security assessments, gap analysis, and remediation guidance.

Read more
Featured

Web Console and Mobile App

Use the full XHack AI agent from your browser, on a computer or a phone, with every tool the desktop app has. Install it to your home screen as an app, run it from a server, and keep engagements going in the background even after you close the tab.

Read more
Featured

Web Application Testing

XHack AI drives a real browser to test your web apps for injection, access-control, and OWASP Top 10 bugs, just describe the target in plain English and watch it work.

Read more
Featured

Mobile App Testing

XHack AI performs static and dynamic mobile app pentesting for Android and iOS, drag in an APK or IPA to uncover hardcoded secrets, insecure components, and runtime weaknesses in plain English.

Read more

Sub-Agents and Swarm

XHack AI can launch multiple autonomous sub-agents that work in parallel, one on recon, another scanning, another exploiting, all reporting back to your main chat so you cover more ground at once.

Read more

HTTP Repeater

XHack AI includes a built-in HTTP repeater: a Burp-style replay bench where you capture, edit, and resend requests to test for IDOR, auth bypass, and parameter injection without any command line.

Read more

JavaScript and Secret Hunting

XHack AI's JS Hunter reads every JavaScript file a site loads to uncover exposed API keys, leaked secrets, and hidden endpoints, mapping your attack surface from a single plain-English request.

Read more

Security Operations Center

XHack AI includes an autonomous SOC mode that continuously monitors, detects threats, triages, and responds, giving you a tireless security operations center that watches your systems while you focus elsewhere.

Read more

Skills And Plugins

XHack AI is endlessly extensible with installable security skills and plugins, so your desktop agent masters new attack methodologies without any command line.

Read more

Background Tasks And Live Terminal

XHack AI runs long security scans in the background with a live streaming terminal, so your desktop agent keeps working while you keep chatting, no command line needed.

Read more

Local And Offline AI

XHack AI runs fully offline on your own local model via Ollama or llama.cpp, so your desktop security agent can work air-gapped with no data ever leaving your machine.

Read more

Project Memory

XHack AI remembers every engagement with persistent per-project memory, so your desktop security agent never forgets scope, targets, or decisions between sessions.

Read more

Findings And Reports

XHack AI captures every confirmed vulnerability as a complete pentest finding and exports polished PDF, HTML, Markdown, or JSON reports, all from your desktop security agent.

Read more

Permission Modes And Safety

XHack AI keeps you in control with per-chat permission modes and a hard safety net, so your desktop security agent stays as hands-on or autonomous as you decide.

Read more

Workflow Engine

Design your attack methodologies as a visual, drag-and-drop node graph in XHack AI, then let the agent learn each one and run it step by step inside the chat.

Read more

MCP Tools And Connections

Connect external MCP servers and tools to XHack AI, including remote MCP connections you can add straight from the web console, to extend the agent without touching code.

Read more

Built-in Browser Engine

XHack AI drives its own fast built-in browser in a docked, multi-tab pane, running custom JavaScript, reading and screenshotting pages, and capturing every request into the Repeater.

Read more

XHack AI API Key

A separate pay-per-use XHack AI API key the agent can use instead of your subscription, billed from credits, with model routing and automatic fallback when your plan limit is reached.

Read more

Usage And Resource Visibility

XHack AI shows how much of your plan you have used right in the context line, with a dedicated Usage tab in settings and a dock that reports the app's own CPU and RAM.

Read more

See it against your own stack

A feature list only tells you so much. Point the agent at a target you own and watch what it finds.

See pricing