ImmuniWeb
Geneva's human-AI hybrid platform for penetration testing, attack surface and dark web monitoring
Quick Overview
| Company | ImmuniWeb SA |
|---|---|
| Category | Web Security |
| Headquarters | Geneva, Switzerland |
| Founded | 2019 |
| EU Presence | Switzerland (adequacy decision, outside the EEA) |
| Data Location | Switzerland (Geneva) |
| Open Source | No |
| Compliance | ISO 9001:2015, CREST accredited (incl. AI-Enabled Penetration Testing) |
| Pricing | Free Community Edition; paid AI Platform (penetration testing, ASM, dark web monitoring) quoted by sales |
| Free Option | Free Community Edition, unlimited use |
| Replaces | Qualys, Rapid7, Cobalt |
Detailed Review
ImmuniWeb pairs human penetration testers with AI models trained specifically to accelerate application security testing, and it was among the first vendors accredited by CREST for that combination — including, in 2026, one of the first ten companies worldwide to hold CREST's new AI-Enabled Penetration Testing accreditation. That accreditation matters because it is an external audit of how the AI is used, not a vendor's own claim about it.
The platform covers penetration testing, attack surface management and dark web monitoring for leaked credentials and brand mentions, sold as one connected suite rather than three separate products. A free Community Edition runs more than 100,000 tests a day for SMEs, universities and small municipal governments that could not otherwise afford security testing, a genuinely different offer from the enterprise-only quote-based tools elsewhere in this category.
ImmuniWeb SA became an independent Swiss corporation headquartered in Geneva in 2019 and has been self-funded and profitable since its first year, without outside investors to answer to. Switzerland sits outside the EEA under an adequacy decision rather than inside the GDPR directly. Paid AI Platform pricing is not published and requires a sales conversation, and the free tier — while genuinely useful — is a lighter product than the paid penetration testing service.
What ImmuniWeb does well
- Human penetration testers with CREST-accredited AI assistance
- Penetration testing, ASM and dark web monitoring combined
- Free Community Edition runs 100,000+ tests daily
- Self-funded and profitable, no outside investor pressure
- ISO 9001:2015 certified
Where ImmuniWeb falls short
- Paid platform pricing not published
- Switzerland: adequacy decision, not EU/EEA jurisdiction
- Free tier is lighter than the paid testing service
- Sales conversation required to evaluate real cost
Standout feature. One of the first ten companies in the world CREST-accredited for AI-enabled penetration testing — audited, not just claimed.
Pros and Cons
Pros
- Human penetration testers with CREST-accredited AI assistance
- Penetration testing, ASM and dark web monitoring combined
- Free Community Edition runs 100,000+ tests daily
- Self-funded and profitable, no outside investor pressure
- ISO 9001:2015 certified
Cons
- Paid platform pricing not published
- Switzerland: adequacy decision, not EU/EEA jurisdiction
- Free tier is lighter than the paid testing service
- Sales conversation required to evaluate real cost
Alternatives to ImmuniWeb
Frequently Asked Questions
What is ImmuniWeb?
ImmuniWeb pairs human penetration testers with AI models trained specifically to accelerate application security testing, and it was among the first vendors accredited by CREST for that combination — including, in 2026, one of the first ten companies worldwide to hold CREST's new AI-Enabled Penetration Testing accreditation. That accreditation matters because it is an external audit of how the AI is used, not a vendor's own claim about it.
Where is ImmuniWeb based?
ImmuniWeb operates from Geneva, Switzerland, which places it under Switzerland (adequacy decision, outside the EEA). Compliance: ISO 9001:2015, CREST accredited (incl. AI-Enabled Penetration Testing).
What does ImmuniWeb cost?
Free Community Edition; paid AI Platform (penetration testing, ASM, dark web monitoring) quoted by sales. Free Community Edition, unlimited use.
Who is ImmuniWeb best for?
Teams that want human-verified penetration testing with AI acceleration. One of the first ten companies in the world CREST-accredited for AI-enabled penetration testing — audited, not just claimed.
What are the drawbacks of ImmuniWeb?
Paid platform pricing not published. Switzerland: adequacy decision, not EU/EEA jurisdiction. Free tier is lighter than the paid testing service. Sales conversation required to evaluate real cost.