Book a call

AI-led Countermind for web, APIs, mobile, cloud and Web3.

Confidence loves a challenge.

AI agents investigate your systems. Human researchers reproduce and sign off every finding before it reaches your report.

Book a call See how it works

Our researchers have helped secure

  • Decentraland
  • GMX
  • Beefy

From a suspicion to evidence you can use.

  1. Suspicion Unusual behaviour logged by agents 486
  2. AI research Suspicions the agents investigated in depth 64
  3. Evidence Reproduced with a request and response 19
  4. Human review Impact assessed and signed off 15
  5. Report Findings that entered the report 15

Sample engagement: payments API, 212 endpoints in scope

ZF-0147-02CriticalUnder review

Sent with the API key of merchant MRC-40977, asking for another merchant's settlements.

  1. GET /v2/merchants/MRC-58213/settlements HTTP/1.1
  2. Host: api-staging.northwind-pay.example
  3. Authorization: Bearer ██████████████████

A conversation first. An agreement before access.

The first call establishes fit. Access and testing follow the written engagement, never the first message.

  1. Steps 1 and 2First call

    Discuss the need

    Clarify the systems, the decision, the constraints and technical fit.

  2. Steps 3 and 4Written engagement

    Confirm the scope

    Agree authorisation, access, actions, timing, deliverables and terms.

  3. Step 5 onwardControlled start

    Coordinate kickoff

    Set contacts, permitted environments and escalation arrangements.

  1. Step 1 Brief received You
  2. Step 2 Scoping call You + Zaaf
  3. Step 3 Proposal sent Zaaf
  4. Step 4 Scope signed You
  5. Step 5 Kickoff You + Zaaf
  6. Step 6 · within 48 hours Investigation and verification AI + review desk
  7. Step 7 Report delivered Zaaf
  8. After delivery Retest, where agreed Zaaf

An illustrative sequence for a scoped Web & API Countermind. AI investigation is instant; human verification of every finding takes up to 48 hours.

Booking a call or sending an email does not start a Countermind or authorise automated testing.

A finding is a start. A decision is the outcome.

  1. Proof.LeadershipWhat is at risk, in plain language, and what to fix first.
  2. Signed.EngineeringReproduction steps, the request and response, and the fix.
  3. Retest.Security ownerSeverity, CWE, CVSS and the retest record.
Human-verifiedAI-found ZF‑0147‑02 2026‑09‑28

Four surfaces. One review desk.

01

Web & API

Your app has roles. Do its boundaries hold?

  • Tenant isolation
  • Authentication and permissions
  • Business logic and race conditions
GET /v2/merchants/MRC-58213/settlements
02

Mobile

See what the app sends. Check what the API allows.

  • Mobile API and object access
  • Data stored on the device
  • Sign-in, sessions and deep links
GET /m/v3/orders/ORD-88213 → 200 OK
03

Cloud

Understand what connects. Review what it can reach.

  • Identity and service permissions
  • Resource exposure
  • Architecture changes
iam:PassRole → arn:aws:iam::…:role/deploy
04

Web3

Follow the transaction. Question the assumptions.

  • Contract changes
  • Wallet interactions
  • Connected off-chain components
call withdraw(uint256) from 0x9f3…c41

A scope, not a licence to roam.

Your systems. A written scope. Nothing runs before you say so.

  • You draw the boundary.Domains, accounts and limits are written down before anything runs.
  • We prove control first.Testing starts only on assets you can show you own.
  • Production stays safe.Rate limits and no-go actions are agreed in advance.

Straight answers

Is Countermind a penetration test?

Countermind is AI-led, human-verified cybersecurity work. It covers what buyers expect from a pentest, with every finding reproduced and signed by a researcher.

Will you touch production?

Only if your written scope says so, with agreed rate limits and no-go actions. Staging is preferred.

What do I need to share?

Domains or contracts in scope, test accounts for each role, and the limits we must respect.

What does it cost?

It is quoted after scoping. Scope, surfaces and retest needs set the fee.

Bring your scope. Let's plan the Countermind.

Thirty minutes with a Zaaf researcher. You bring one scope; we show you what a Countermind would look at first.

Book a call hello@zaaf.ai
Next step
30-minute call
With
A Zaaf researcher
You bring
One scope
Runs before you agree
Nothing
Book a call