Find the weak spots in your app before anyone else does.
hai is an AI assistant for security testing your own web apps, APIs and infrastructure. Plan the test, understand what you find, fix it, and write it up.
Our login endpoint says “user not found” for unknown emails and “wrong password” otherwise. Is that a problem?
Yes. That's account enumeration (CWE-204): anyone can confirm which emails have accounts, which makes credential-stuffing and phishing easier.
Fix: return one generic message for both cases and keep response times equal. Apply the same rule to password reset and sign-up.
Severity: Medium. Want me to draft this as a report finding?
Scope
Describe what you're testing. hai helps you set boundaries and a test plan.
Test
Work through checks together, from config review to validating a suspected issue.
Fix & report
Get concrete fixes and a clean write-up you can hand to your team or client.
What it helps with
- Test planning
- Turn "is our app secure?" into a checklist that fits your stack and scope.
- Finding triage
- Paste scanner output or a suspicious response and get a plain explanation of the risk.
- Fix guidance
- Code-level remediation for your framework, plus how to confirm the fix worked.
- Config review
- Check web server, cloud, and auth settings for common misconfigurations.
- Severity scoring
- CVSS scores with the reasoning behind them, so priorities hold up.
- Reports
- Client-ready finding write-ups with evidence, impact and remediation.
Built for testing what you own
Every account confirms it only tests systems it owns or has written permission to test, such as your own product, a client engagement, or a bug-bounty scope. hai won't help target anyone else. Read the use policy.
Pricing
A flat monthly price with a usage allowance. No overage charges. Cancel anytime.
Free
Try it on a real project.
- 50K tokens
- All features
- No card required
Starter
For individual developers and researchers.
- 6M tokens / month
- Unlimited projects
- Report export
Pro
Most popularFor consultants and active security work.
- 18M tokens / month
- Priority processing
- Everything in Starter
Team
For teams with heavy usage.
- 40M tokens / month
- Highest rate limits
- Everything in Pro
Usage allowance: Free 50K · Starter 6M · Pro 18M · Team 40M tokens. Prices in USD.
Questions
Who is hai for?+
Developers checking their own apps, security consultants working under a signed engagement, and bug-bounty researchers working within a program's published scope.
What can I test with it?+
Only systems you own or have written permission to test. This is a condition of every account; see the use policy.
How does billing work?+
Each plan includes a monthly usage allowance. You pay a flat price, usage counts against the allowance, and it resets every month. There are no overage charges.
What happens when I reach my allowance?+
Requests pause until the next month or until you upgrade.
Can I cancel?+
Yes, anytime. Your plan stays active until the end of the period you've paid for.