Harnesses

supa.ai begins same-day penetration testing for AI model cyber attack simulations

October 14, 2026 · 2 min read

Four people collaborating around a laptop on a table in a modern office
Cherrydeck / Unsplash

supa, inc. has launched a new service called "Security Diagnosis AI," which allows for penetration testing that simulates cyber attack methods using Fable and Astra-class frontier AI and open-weight models. This service can be initiated on the same day as requested. The testing is conducted securely on the company's own GPU server, supa cloud, ensuring that sensitive information and detected vulnerabilities are not transmitted to external services or cloud servers. The cost for this service ranges from 500,000 yen to 1,200,000 yen, which is reportedly up to one-seventh the cost compared to manual testing by experts.

The penetration tests aim to evaluate how far an attacker can penetrate a system from their perspective, trying to access sensitive information and critical functions. supa.ai utilizes a unique framework that combines a large language model (LLM) for security validation with a harness that controls the execution of tools by AI. This framework allows for the creation of realistic attack scenarios with the assistance of dedicated white-hat hackers, who take into account actual business operations and user permissions.

Once the scope of the testing is finalized, reports will be delivered within a minimum of three business days. The reports include a comprehensive assessment of vulnerabilities and their potential impact on the business. The testing environment is governed according to ISMS standards, ensuring that all information, execution logs, and validation evidence are managed securely.

As the use of AI agents expands, there are increasing reports of AI being utilized in cyber attacks. Google Cloud recently indicated that multiple attackers are automating reconnaissance, vulnerability verification, and credential collection using AI agents. In light of this, organizations must assess whether their authentication and access management can be breached and to what extent critical information and functionalities can be accessed.

supa.ai’s Security Diagnosis AI combines expert judgment with AI execution to help companies mitigate the financial burden associated with penetration testing. This service not only provides initial scans and expert reviews but also ensures a follow-up reassessment after vulnerabilities have been addressed, enhancing the overall security posture of the clients.