About Excession Labs
Excession Labs builds Incursion, an AI agent for authorized security testing, and runs penetration tests of web applications, APIs and SaaS platforms.
Penetration Test Services is a service of Excession Labs. We build AI tools for authorized security work and use them to test web applications, APIs and multi-tenant SaaS platforms.
What we build#
Our main tool is Incursion, a terminal AI agent for authorized security testing. Incursion splits an engagement into tasks and runs them in parallel. The operator sets a rule for each tool: it runs on its own, waits for approval, or is blocked. A task is finished only when each finding links to its evidence. Pentesters, red teams and bug bounty hunters use Incursion for their own authorized work.
How we deliver a test#
Incursion does the testing work under the tool rules above. Excession Labs agrees the scope with you in writing, checks the evidence for each finding and writes the report. Our methodology covers the evidence standard, the controls we run and our safety limits.
What we will not do#
- Test a system without written authorization from its owner.
- Publish or name a customer without permission.
- Promise that an auditor or a customer will accept a report. We ask what the reader needs and write the report to show it.
- Claim a finding we could not demonstrate. Unproven paths are labeled as inferred.
Our security sites#
Contact#
Email support@excessionlabs.ai, follow @ExcessionLabs on X, or visit excessionlabs.ai. To request a test, use the request form.
Need a pentest you can act on?
Tell us what you need tested and why. We reply to agree scope, and testing starts only after written authorization.