| What it does | Automated human risk management platform that monitors leaked credentials, simulates real attacks and validates change with retests
| Open-source security for AI coding agents
|
|---|
| Stage | Startup
| Not given
|
|---|
| Founded | 2026
| Not given
|
|---|
| Based in | CO
| GR
|
|---|
| Pricing model | Paid
| Open source
|
|---|
| Pricing | Fensivo 360: Starter tier (25-100 employees) USD 4.90/employee/month, Growth tier (101-250 employees) USD 4.20/employee/month, Business tier (251-499 employees) USD 3.90/employee/month, Enterprise (500+ employees) custom quote. Simulacro One-Shot: Starter USD 750, Growth USD 1,250, Business USD 1,75
| Open-source sensor is free. Enterprise pilot for up to 25 developer seats starts with a 90-day design-partner pilot, scoped with you.
|
|---|
| Key features | - 24/7 monitoring of exposed credentials across 680+ breach databases
- Personalized phishing simulations adapted by role, department and individual context
- Up to 3 simulations per employee per month
- Immediate 3-5 minute microlearning at moment of error
- Individual risk scores per employee updated continuously
- OAuth integration with Google Workspace and Microsoft 365
- Executive dashboard with real-time reports
- Automatic retest validation weeks after training
- Automatic credential classification and alerts under 60 seconds
- Support in Spanish and English
| - Records tool calls from Claude Code, Cursor, Codex, GitHub Copilot and other agents
- Detects risky sequences and agent behavior patterns
- Forwards to SIEM: Splunk, Elastic, Microsoft Sentinel, Google SecOps
- MCP server scanning to detect risky or malicious integrations
- Works on Windows, Linux and macOS without kernel driver
- DLP integration to prevent credential and sensitive data exfiltration
- 0 false positives across 57 test cases with MITRE ATT&CK coverage
|
|---|
| What makes it different | - Measures real behavior under real attack, not just completed training courses
- Delivers microlearning at the exact moment of error when retention is highest
- Platform operational in one day with first executive report in 48 hours
- Built natively for Latin America's regulatory context and attack patterns
- Combines offensive and defensive perspectives to identify true vulnerabilities
| - Hash-chained records can be verified offline, catching any tampering or editing attempts
- Sees which AI agent ran the command and the session it belongs to, unlike EDR tools
- No account required, no telemetry sent until you configure a sink
- Single maintainer, self-funded, built in public with no hidden development
- All claims on the website verifiable by running commands on your own machine
|
| Community votes | 0 | 0 |
| DR (Domain Rating by Ahrefs) | 5 ▲ +1 (up) since last check | 36 ● no change since last check |
| Trust Flow (Majestic) | 4 | 5 |
| Citation Flow (Majestic) | 20 | 18 |
| Referring domains (Majestic) | 16 | 45 |