Testing runs the way an attacker would run it. Scope is agreed with you first, enforced outside the AI, and tested for bypass routes.
Sydney, on Astero-operated hardware
Plans the investigation and adapts as it learns.
Browser, shell and scripts the agent operates.
Enforced outside the agent. Only agreed hosts and IP addresses can be reached, and the agent cannot change the list.
No connection can be made
Cuts all network access from the assessment virtual machine. The agent cannot restore it.
Astero operates the platform. You do not install software or connect internal systems.
Targets, accounts, testing windows and prohibited activities stay as agreed.
The controls cover browser, shell and script traffic, and stay in force even if the agent behaves unexpectedly.
Targets, accounts, testing windows and prohibited activities are set before testing starts.
Testing starts from the outside, without credentials, source code or a complete asset register. Authorised test accounts enable deeper testing of applications and APIs. Astero monitors the assessment and retains connection logs, agent activity records and evidence.
Astero reviews every finding. Demonstrated exploitation is kept apart from potential consequences and untested areas, with coverage and limitations stated.
Agreed fixes are retested.
Plain answers for security reviews.
Anthropic Claude models, used through Claude Code. They plan investigations, operate security tools and interpret results.
In separate Linux virtual machines on Astero-operated hardware in Sydney. Inference goes through Anthropic's commercial API. Assessment files are stored locally with encryption at rest and restricted access.
Application responses, screenshots and testing evidence. That may include customer information, test credentials and session tokens.
No. Astero does not train foundation models on customer data, and Anthropic's commercial API does not use inputs or outputs for training by default.
By default, Anthropic's model API is the platform's only third-party service integration.
Yes. Amazon Bedrock is available for enterprise customers. Astero is also evaluating hardware to run fully self-hosted models.