# SQUR - AI-Powered Autonomous Pentesting

## Company Overview
SQUR ships two related products for European SMEs with compliance needs:
1. **SQUR Autonomous Pentesting** — autonomous AI penetration testing for web applications and APIs, delivering verified findings and compliance-ready reports in 24 hours.
2. **SQUR Attack Surface (ASM)** — a free 60-second external attack-surface scanner that prioritises targets and hands them directly to the pentest engine.

Built for SMEs without dedicated security teams. EU data residency in Brussels (Google Cloud europe-west1).

## Core Pages
- Home: https://squr.ai/
- About: https://squr.ai/about.html
- Free Attack-Surface Scan: https://squr.ai/scan.html
- Trust Center: https://squr.ai/trust.html
- Careers: https://squr.ai/careers.html
- Blog: https://squr.ai/blog/
- Privacy Policy: https://squr.ai/privacy-policy.html
- Imprint: https://squr.ai/imprint.html

## Products & Services

### SQUR Autonomous Pentesting (https://app.squr.ai)
- AI-powered penetration testing for web applications and APIs, 24-hour turnaround
- Nine specialised AI agents collaborating as a pentest team
- Real exploitation, independent verification of every finding, deduplicated output
- OWASP Top 10, OWASP API Top 10, OWASP WSTG coverage
- Findings enriched with CWE, CVE, CAPEC, and MITRE ATT&CK references
- Risk levels: Critical / High / Medium / Low / Informational
- Two reports per engagement: Attestation Summary (shareable, no exploit detail) and Detailed Report (findings, evidence, remediation); PDF download plus in-app web view
- Customer-triggered retest after remediation (one click)
- Pricing: €1,995 per pentest, or 10-credit bulk pack at €1,495 per pentest

### SQUR Attack Surface — ASM (https://asm.squr.ai)
- Free 60-second external attack-surface scanner, no signup required for the public scan
- 33 checks across 10 categories (15 public / 31 authenticated)
- Subdomain and asset discovery via DNS, Certificate Transparency, WHOIS
- Technology fingerprinting against 7,500+ technologies
- Subdomain takeover detection across 22 cloud providers
- CVE matching against NVD; WAF/CDN detection
- Identifies the #1 recommended pentest target and hands off to SQUR Autonomous Pentesting in one click

## Company Details
- Legal Name: SQUR UG (haftungsbeschränkt)
- Location: Germany (Weingarten office, Karlsruhe preferred for team)
- Founded: 2025
- Stage: Post-launch
- Mission: Make expert-grade pentesting accessible, fast, and affordable for European SMEs

## Careers
No specific open roles at this time. Exceptional talent in autonomous pentesting can apply directly via the application form at https://squr.ai/careers.html#application-form.

## Blog Topics
- Autonomous pentesting methodology
- Building trust in autonomous AI security
- AI validation and false positive reduction
- Independent pentest benchmark results
- Fintech and DORA compliance with autonomous pentesting

## Contact
- General Inquiries: hello@squr.ai
- Career Inquiries: careers@squr.ai
- Website: https://squr.ai

## Technology Stack
- AI/ML: LangGraph multi-agent orchestration; nine specialised AI agents; independent verification agent
- Security: industry-standard professional pentesting toolchain, browser automation, out-of-band testing
- Infrastructure: Google Cloud Platform (europe-west1, Brussels, Belgium); Cloud Run; Cloud SQL; Auth0
- Data residency: all scanning data, findings, and reports stored in the EU

## Compliance
SQUR is not itself certified. Pentest reports are designed to support customer compliance work for:
- GDPR
- DORA Article 24 (annual penetration testing)
- ISO 27001 pentest evidence
- SOC 2 evidence
- NIS2, PSD2

## Key Differentiators
- 24-hour turnaround vs 3-6 weeks for traditional pentests
- ~80% cost reduction vs typical manual pentest engagements (€1,995 vs €10k-€30k)
- 87.5% success rate on an independent pentest benchmark
- Real exploitation and independent verification, not just signature-based detection
- EU data residency (Brussels)