AvalonX logo

AvalonX

ComplianceContinuous penetration testing

Continuous AI-powered penetration testing for SMBs supporting SOC 2, ISO 27001, PCI DSS and HIPAA evidence.

Last verified · 6 sources

AvalonX website homepage
avalonx.ai homepage

What is AvalonX?

Founded in 2026 and headquartered in Alpharetta, Georgia, AvalonX provides continuous AI-powered penetration testing for small and midsize businesses. Artemis orchestrates autonomous offensive-security agents powered by Aether, with human verification and same-day findings.

AvalonX is a continuous offensive-security platform that tests an authorized attack surface from an attacker’s perspective. Customers define domains, IP ranges, cloud accounts, applications or internal networks, then set exclusions, testing windows and escalation contacts. Artemis orchestrates autonomous agents across reconnaissance, enumeration, exploitation, lateral movement and reporting, while Aether supplies attack-path reasoning. Human penetration testers verify findings when expert judgement is needed. External tests require no software installation and are constrained by explicit rules of engagement.

The product combines live attack-surface discovery, exploitability validation, confirmed findings, attack-path analysis, remediation guidance, retesting, audit trails and executive and technical reporting. AvalonX says Aether has 400 billion parameters and nine years of proprietary offensive-security training, but this is not an independent benchmark. Findings map to SOC 2 Type II, ISO/IEC 27001:2022, PCI DSS v4.0 and HIPAA/HITECH requirements; the product supports evidence and testing, not certification. Public integration or API availability is not documented.

AvalonX is aimed at small and midsize businesses that need recurring penetration testing without a dedicated CISO or in-house red team. Testing completes in hours with verified findings delivered the same day. Published plans cover up to 10 targets: quarterly testing costs $249 per month, monthly testing $599 per month, and weekly testing $899 per month. Each plan includes continuous vulnerability scanning between tests. A free external read-only test is available.

AvalonX news

  1. AvalonX emerges from stealth with up to $10M

    After 18 months in stealth, AvalonX launched continuous AI penetration testing for small and midsize businesses, backed by up to $10M from Ridown Capital, with findings mapped to SOC 2, ISO 27001, PCI DSS v4.0 and HIPAA.

    Source: PR Newswire ↗Our coverage →

Key features

Autonomous penetration testing

Artemis coordinates agents across reconnaissance, enumeration, exploitation, lateral movement and reporting.

Attack-surface discovery

The platform continuously discovers external assets and shows how the authorised attack surface changes.

Attack-path reasoning

Aether connects weaknesses to model realistic routes an attacker could use to compromise a business.

Validated findings

Testing validates exploitability and provides evidence, reproduction steps, impact and remediation guidance.

Remediation and retesting

Teams can request retests after fixes and verify whether vulnerabilities have closed.

Compliance evidence mapping

Findings map to SOC 2 Type II, ISO 27001:2022, PCI DSS v4.0 and HIPAA/HITECH requirements.

Controlled engagement workflow

Customers define scope, exclusions, windows and escalation contacts, with pause controls and audit trails.

AvalonX pricing

Starting price: From $249/mo (as of Nov 2026)

Published plans start at $249 per month and cover up to 10 targets. All plans combine scheduled penetration testing with continuous vulnerability scanning, verified findings and remediation guidance.

PlanPriceWhat's included
Essentials$249/moQuarterly testing, up to 10 targets, scanning, verified findings, remediation guidance, AAA Tested badge
Monthly testing$599/moMonthly testing, up to 10 targets, scanning, verified findings, remediation guidance, AAA Tested badge
360$899/moWeekly testing, up to 10 targets, scanning, verified findings, remediation guidance, AAA Tested badge

Free trial: Free external read-only test; no paid-plan trial is publicly specified.

Pros & cons

Pros

  • Published pricing starts at $249 per month.
  • Autonomous testing is paired with human verification.
  • Same-day findings, remediation guidance and retesting shorten the fix-and-verify loop.
  • Explicit scope boundaries, testing windows, pause controls and audit trails support safer testing.

Cons

  • Public plans cap included coverage at 10 targets.
  • The service supports compliance evidence but does not certify an organization.
  • Publicly documented integrations and API access are limited.
  • Penetration testing is quarterly, monthly or weekly by plan; only vulnerability scanning runs continuously.

Who is AvalonX best for?

  • Small and midsize businesses needing recurring testing without an in-house red team.
  • Security teams wanting verified findings and retesting rather than raw scanner output.
  • Companies preparing SOC 2, ISO 27001, PCI DSS or HIPAA/HITECH evidence.
  • Teams needing published monthly pricing and up to 10 targets per plan.

Frameworks and use cases

SOC 2 Type IIISO 27001PCI DSS v4.0HIPAA/HITECHPenetration testingVulnerability scanningAttack-surface managementSMB securityAudit evidence

Integrations

Frequently asked questions

What does AvalonX cost?

+

Plans cost $249 monthly for quarterly testing, $599 for monthly testing and $899 for weekly testing. Each covers up to 10 targets and scanning between tests.

How quickly does AvalonX work?

+

AvalonX says testing completes in hours, with verified findings delivered the same day. Customers define scope first and can request retests.

How does AvalonX compare with Pentera?

+

AvalonX is an SMB-focused subscription with public monthly pricing and human verification. A like-for-like price comparison is not established by available sources.

What integrations does AvalonX support?

+

No named third-party integrations are documented on reviewed public pages. AvalonX says Aether has no public API, so buyers should confirm workflow integrations.

Who is AvalonX for?

+

It targets SMBs without a dedicated CISO or in-house red team, including teams needing recurring testing and compliance evidence.

Is AvalonX a certification?

+

No. It maps findings to requirements and provides testing evidence, but says it is not an accredited certification body; its AAA badge attests testing against an agreed scope.

Sources

Facts and pricing verified on November 1, 2026. Vendors change pricing often, so confirm with AvalonX before buying. How we research

  1. Homepage
  2. Platform
  3. Pricing
  4. FAQs
  5. Funding news
  6. Launch release

Work at AvalonX or spot something out of date? Suggest a correction. We check every report against a public source and update the page, usually within a few days.

AvalonX alternatives

See all 6 alternatives

Similar compliance tools

Browse all compliance tools