PentestAI Service Scope and Authorized Use
Understand PentestAI authorized-use requirements, available features, assessment execution limits, and current billing and service terms.
Features available in this release
This release implements accounts, private project drafts, account settings, company assessment workflows, activity records, and a configurable Stripe billing integration. Saving a draft does not launch a test. Starting a company assessment sends requests to its authorized targets only after verification, authorization, credit reservation, and execution availability checks.
Authorized use and sensitive information
Prepare scope only for assets you are authorized to assess. Do not use the service to plan unauthorized access. Do not place credentials, tokens, personal records, or assessment evidence into scope notes.
Billing availability, payment confirmation, and credits
Plans can start checkout only when the operator configures a real Stripe Price. Review the provider-hosted checkout amount, interval, and terms before paying. Purchased credits do not make unconnected assessment execution available.
Paid monthly and annual subscriptions release 10,000 company credits monthly; annual billing includes 12 installments, not a single upfront credit grant. Only due installments synchronized to the company ledger can be spent. Partial refunds proportionally reduce released and future credits, and a full refund stops future installments. Refunded credits already used may leave an outstanding balance to resolve. Canceling renewal preserves the paid period and its remaining installments. Review cancellation, refund, tax, and service delivery terms before payment.
Requirements before a full production launch
The operator must supply its legal identity, contact and support route, applicable contractual terms, dispute and refund procedures, and finalized privacy information before public production launch. This page records the implementation scope and is not a completed customer contract.