Why RiftX Exists
Retesting should be rigorous, repeatable, and far less manual.
After years of pentesting, I kept watching senior pentesters spend hours retesting the same reflected XSS they had seen dozens of times. The loop was identical every engagement: navigate, inject, screenshot, write it up. RiftX exists because that loop should take five minutes, not an hour.
Operating stance
Why the company exists
Routine retesting keeps consuming the time of senior pentesters even when the loop is repetitive, structured, and automatable.
What we believe
Retesting should be faster without becoming less defensible. A speed gain only matters if the evidence still holds up in a report.
Who it is built by
Built by a pentester with years of AppSec experience and direct exposure to the repetitive retesting work consultancies handle engagement after engagement.
The system is opinionated because the workflow demands it.
Steps-to-reproduce is primary
The system is designed around the pentester's reproduction steps, not a separate payload field. Human context is the real input.
Proof beats indication
A verdict should be grounded in evidence, not weak symptoms. We optimize for artifacts pentesters can defend in a report.
Honesty beats confidence theater
Needs Review is a valid outcome. The system is not supposed to guess its way into a green badge.
Serious tools are clear about what they are not.
Not a scanner. It retests reported findings. It does not discover new ones.
Not a replacement for pentesters. It compresses routine retesting so your team can spend time on judgment heavy work.
Not AI theater. An LLM judge reaches every verdict from raw evidence, and an independent auditor rechecks each one and can only downgrade to Needs Review. The system does not impersonate certainty.
Built by a pentester
The company perspective comes from real AppSec and offensive security work. That matters because the product is trying to compress the repetitive parts of the job without flattening the judgment that makes pentesters valuable.
Private beta
Get your pentesters out of the retesting loop.
If your team retests reported web findings by hand every engagement, RiftX was built for you. Limited beta spots available.