Overview
Valinor Vulnerability Assessment is a paid add-on service that goes beyond continuous monitoring to identify exploitable vulnerabilities in your systems. It offers six assessment types: Exposure Assessment (99 EUR), Active Assessment (279 EUR), Authenticated Assessment (379 EUR), AI-Agent Pentest (METATRON, 890 EUR), Autonomous AI Pentest (Strix, 990 EUR), and a Full Package (1890 EUR). Each assessment is a one-time delivery against a single target, with pricing per delivery (VAT excluded). The service requires proof of ownership and signed rules of engagement before any active scanning begins. Reports include findings with evidence, severity, and remediation steps, not raw exports.
Best for
- Security teams and businesses needing to validate exploitable vulnerabilities beyond monitoring.
- Organizations requiring authorized, controlled penetration testing with clear evidence.
- Teams wanting to test protected areas behind login with authenticated scans.
- Companies interested in AI-driven pentesting that adapts to findings.
- Those needing a comprehensive assessment with executive summary and review call.
Key capabilities
- Exposure Assessment: Safe, non-intrusive crawl and inventory of exposed surface, leaked secrets, and misconfigurations.
- Active Assessment: Real attack payloads (SQLi, XSS, path traversal) under controlled conditions with rate limiting.
- Authenticated Assessment: Tests areas behind login using a test account, including access control checks.
- AI-Agent Pentest (METATRON): LLM-driven agent uses real tools (nmap, nikto, sqlmap) in a sandbox to attempt exploitation.
- Autonomous AI Pentest (Strix): Open-source agent with isolated sandbox tries to confirm vulnerabilities with proof of concept.
- Full Package: All five assessments plus executive summary and 30-minute review call.
Common workflows
- Choose scan type and submit target via form.
- Complete ownership verification (DNS TXT record, file under /.well-known, or enrolled agent).
- Sign Rules of Engagement document specifying target, window, intensity, and retention.
- Pay invoice (discount for Pro/Ultra subscribers after 3 months).
- Scan runs in agreed window; if target moves, scan stops for re-approval.
- Receive report in account and by email with findings, evidence, severity, and remediation steps.
What to evaluate
- Authorization requirements: Active and authenticated assessments need verified ownership and signed rules of engagement; passive needs single proof.
- Scope and depth: Determine which assessment level matches your needs, from exposure to full AI-driven pentests.
- Pricing: Per delivery, VAT excluded; discounts available for Pro/Ultra subscribers.
- Report quality: Every finding includes evidence and remediation steps; secrets are masked.
- Integration with monitoring: Complements continuous monitoring by showing what can be exploited.
Getting started
- Visit the official website and navigate to the Vulnerability Assessment page.
- Select the assessment type that fits your requirements.
- Submit your target and complete ownership verification.
- Sign the Rules of Engagement and pay the invoice.
- Receive your report and optionally schedule a review call.
Why ToolSift lists it
Valinor Vulnerability Assessment provides a structured, authorized approach to identifying exploitable vulnerabilities, with clear evidence and remediation guidance. Its tiered offerings cater to different security needs, from basic exposure checks to advanced AI-driven pentests, making it a valuable tool for organizations seeking to strengthen their security posture.
