Deus Rex

Pentest your

Autonomous penetration testing for web, iOS and Android.

And this is just the start.

Deus Rex finds real vulnerabilities in real software, proves them with evidence, and raises the fix as a pull request.

See the coverage
Built byCyrexAI did not make us security experts. A decade of engagements did.
Secured by Cyrex
Amazon GamesTencentBeauty PiebingliCurveEpic GamesNationale LoterijPenn InteractivePLAIONRocksteadyZyngaAmazon GamesTencentBeauty PiebingliCurveEpic GamesNationale LoterijPenn InteractivePLAIONRocksteadyZynga
Coverage

Most autonomous testing stops at web applications.

Deus Rex tests web, iOS and Android today, with coverage continuously expanding. Every surface we bring online lands inside the same platform, driven by the same agent, so the teams who onboard now inherit everything that follows.

Web

live

Applications, APIs and the traffic between them.

iOS

live

Binary, runtime and traffic, tested on device.

Android

live

Binary, runtime and traffic, tested on device.

And beyond

Desktop, cloud, infrastructure, IoT and embedded are already tested by Cyrex engineers today. As these capabilities are codified, they become part of Deus Rex too.

It works the way a penetration tester does.

Most tools scan for known patterns and hand you a list. Deus Rex reasons about your application, chains findings together, and reports what it actually managed to do. Findings arrive with the patch already written.

Built byCyrex

Twelve years breaking into the hardest software in the world.

That work was done at Cyrex, testing for studios and enterprises whose products reach hundreds of millions of users. Deus Rex takes what that team learned and makes it autonomous.

12 yrsoffensive security
200+studios & enterprises
500M+users on platforms we've tested
> amazon_games
The Cyrex team brings a wealth of experience and deep technical expertise in game security.
Ben ZighHead of Security Engineering, Amazon GamesAmazon's games division, backed by AWS-grade security standards.
> Tencent
When it comes to penetration testing, Cyrex are clearly the market leader.
Liam BrennanSenior Director, Tencent IEGGTencent is the world's largest video game company by revenue.
How it works

Our engineers run it. You get the findings.

Deus Rex is running on live engagements today. Our offensive engineers drive the platform against your software, review every finding before it reaches you, and deliver the fixes as pull requests you can merge.

Expert-led engagements

Available now

Our offensive engineers run Deus Rex against your software. You get verified findings with the exploit proven, not guessed, and the fix raised as a pull request. Scoped to your project, no commitment.

Autonomous testing

In private beta

The platform running against every release, no engineer in the loop.

Onboard now

Deus Rex is testing real software today.

Coverage is expanding fast, and teams who onboard now inherit every surface that follows. Tell us about your project and we will come back with a custom proposal.

Open source instead

Tell us the scopeProposal in five daysNo commitment

Open source

Selected open-source projects get access to Deus Rex during the private beta. One cohort, then it closes.

Closes in