Terra Security
Also known as: Terra Portal
Continuous penetration testing by an AI agent swarm with human pentesters on the loop, across apps, networks and the customer's AI systems, with every test action logged and signed reports.
Terra Security sells continuous penetration testing run by an AI agent swarm with human pentesters on the loop. The agents handle discovery, execution and attack-chain reasoning across web and internal applications, APIs, external and internal networks, and the customer's AI systems, copilots, agents and LLM integrations, adapting to app workflows and authentication flows. Continuous monitoring notices meaningful changes in production and tests them, with updates within hours of a code change.
A human pentester stays on the loop for oversight and judgment at critical decision points through TORCH, Terra's agent-human collaboration hub, and Terra Portal is the desktop application testers use to oversee live testing. Every test action is logged, and reports are signed by certified pentesters for use in SOC 2, ISO 27001 and HIPAA audits. Terra states SOC 2 Type II certification and CREST membership and is an AWS Partner.
Vendor details
Canonical URL
https://www.terra.security
Category
Security / SOC agent
Funding status
Independent New York and Tel Aviv company founded 2024 by Shahar Peled (CEO) and Gal Malachi (CTO); $8M seed April 2025 (SYN Ventures, FXP Ventures, Underscore VC, with angels including former Google CISO Gerhard Eschelbeck and Talon Security founders) followed by a $30M Series A September 2025 led by Felicis with Dell Technologies Capital and SVCI, totaling $38M; Eschelbeck joined the board; ~25 employees serving Fortune 100 and Fortune 500 clients; named to the Rising in Cyber 2026 list
Company status
independent
Use cases & customers
Primary use cases
Target customers
Deployment options
Integrations
Tests web and internal applications, APIs, external and internal networks, and the customer's AI systems, copilots, agents and LLM integrations. Terra names no ticketing, CI/CD or SIEM integrations and no API.
In practice
The annual pentest is six weeks of scheduling and a PDF that is stale a month later. Terra's agent swarm tests web apps and networks continuously and surfaces new findings within hours of a code change.
A company is shipping a customer facing copilot and needs to know how it can be abused. Terra's AI red teaming tests the copilot, its agents and LLM integrations, with every test action logged.
An auditor asks for proof of penetration testing for SOC 2 and PCI DSS. Terra's reports come signed by certified pentesters and ready for audit, with only validated findings in them.
Sources & related URLs
Research sources
Agentic Index coverage score
6.5 / 14 capabilities · 46%
| Integrations & Tool Calling | Partial |
|---|---|
|
The agent swarm acts against the customer's web apps and APIs, AI systems and networks, adapting to authentication flows. Internal network testing traces lateral movement and privilege escalation, and external testing maps services and misconfigurations. Terra names no integration catalog, no custom tool support and no action framework into ticketing, CI/CD or a SIEM. SourceTerra Security, terra.security/terra-platform and terra.securityread 2026-10-06 |
|
| Workflow Orchestration | Full |
|
"Terra's agent swarm" handles discovery, execution and attack chain reasoning at scale across web and internal applications, external and internal networks and AI systems. TORCH, the Terra Offensive Research Collaboration Hub, lets pentesters work with the agents directly, so several agents and people share the work. SourceTerra Security, terra.security/terra-platform and terra.securityread 2026-10-06 |
|
| Knowledge Grounding & RAG | Partial |
|
Continuous monitoring recognizes meaningful changes in the customer's production environment, and the swarm adapts to app workflows, authentication flows and data handling, keeping a map of the estate across cycles. Findings are verified and prioritized by business context. Terra names no knowledge store the agents retrieve from. SourceTerra Security, terra.security/terra-platform and terra.security/llmsread 2026-10-06 |
|
| Human Oversight & Guardrails | Partial |
|
Terra is "built as a human-on-the-loop platform". Agents handle discovery, execution and reasoning about attack chains, while a human pentester stays on the loop through TORCH for oversight and judgment at critical decision points. A person supervises and keeps the key decisions, but Terra names no approval step before an agent action goes through. SourceTerra Security, terra.security/terra-platformread 2026-10-06 |
|
| Security, Identity & Governance | Partial |
|
By Terra's account it holds SOC 2 Type II certification and CREST membership, and a DPA is available. It names no SSO, role model or other access controls for its own platform. SourceTerra Security, terra.security and terra.security/llmsread 2026-10-06 |
|
| Observability & Auditability | Full |
|
"Every test action is logged and defensible", and execution records stay under human control, so each action the agents take is on record. Reports come ready for audit, signed by certified pentesters, and are accepted for SOC 2, ISO 27001, HIPAA and PCI DSS work. SourceTerra Security, terra.security/terra-platform and terra.security/llmsread 2026-10-06 |
|
| Memory & State Persistence | Not documented |
|
The environment state Terra keeps to spot changes works as a map of the customer's estate. Terra names no agent memory and does not say what it would keep or for how long. SourceTerra Security, terra.security/terra-platformread 2026-10-06 |
|
| Deployment & Data Residency | Not documented |
|
The agents test the customer's live production environments with production safe execution, and Terra publishes a DPA and an SLA. For the platform itself, Terra names no hosting region, customer environment or data residency option. SourceTerra Security, terra.security/llmsread 2026-10-06 |
|
| Prebuilt Agents, Templates & Packs | Partial |
|
One agent swarm runs across four modules, which are web and internal applications, external networks, internal networks and AI red teaming. All four are part of one platform, not separate products, and the agents themselves are unnamed. Terra says the platform cuts testing timelines from four to six weeks down to two to four hours. SourceTerra Security, terra.security/terra-platform and terra.securityread 2026-10-06 |
|
| Triggers & Channel Coverage | Full |
|
Continuous monitoring picks up meaningful changes in production and tests them, with new findings "within hours of a code change", so a change starts the work on its own. The initial baseline typically surfaces validated findings within one to two weeks. SourceTerra Security, terra.security/terra-platformread 2026-10-06 |
|
| Model Flexibility & Routing | Not documented |
|
The model provider is not named, and Terra names no way for customers to choose or route models. SourceTerra Security, terra.security/terra-platformread 2026-10-06 |
|
| APIs, SDKs & MCP Extensibility | Not documented |
|
There is no published developer documentation, and Terra names no API, SDK or MCP server for building on the platform. TORCH, where human testers work with the agents, is a workflow inside the platform, not an API. SourceTerra Security, terra.security/llmsread 2026-10-06 |
|
| Testing, Debugging & Optimization | Full |
|
Terra's AI red teaming tests the customer's "AI systems, Copilots, agents, and LLM integrations against threats that prompt fuzzing cannot reach", continuously, with logged actions and signed reports, covering AI applications, LLMs and agent behavior. Only validated findings are reported, so the team can secure the most critical systems first. SourceTerra Security, terra.security/terra-platform and terra.securityread 2026-10-06 |
|
| Browser & Computer Use | Not documented |
|
The agents work through web application workflows and authentication flows as part of testing, and Terra names no browser or computer control offered to the customer as a capability of its own. SourceTerra Security, terra.security/terra-platformread 2026-10-06 |
|
The Agentic Index coverage score grades every vendor Full, Partial or Not documented against the same 14 buyer facing capabilities, from public evidence only. Each capability links to how all vendors in the index score on it. How this evidence is graded
Product updates
The Misconfiguration Researcher is a new capability in Terra's automated pentesting that starts from the technologies actually present in an application's stack rather than a fixed list of known bad settings. It researches what each product can do and which configuration choices control those features, then passes any dangerous combination it finds to the validation phase as a hypothesis to test. One example is a FreeSWITCH deployment whose exposed interfaces open a path to running commands on the host with no flaw in the application's own code.
Bears on: Agent capability
View sourceFeature Analysis is now generally available to all Terra customers in Terra Platform and TORCH. Its agents work through a target web app's interface to map the product features on each page, record steps to reproduce them and link each feature to the API requests it triggers, and sensitive actions can be blocked by default and marked as such.
Bears on: Human approval / guardrails
View sourceTerra added Validation Hub, which takes in vulnerabilities from scanners, bug bounty reports and other outside sources and has its agents try to exploit each one. An import only becomes a finding once an agent proves it can be exploited, with a person overseeing the work and duplicates checked against Terra's own results.
Bears on: Integrations
View sourcePricing
Contact sales; no prices published. Demo on request.
Inference, not stated by the vendor: scale and complexity of the applications, networks and AI systems under continuous testing.
What is public
The platform (agent swarm, human-on-the-loop testing, covered surfaces) is public; no plans or prices are disclosed.
Variable cost rationale
Inference, not stated by the vendor: cost likely grows with the surfaces under continuous testing.
Sales call required
Yes, required for paid access
Free / trial
Not published
Related vendors
- 7AI — Agentic SOC from the Cybereason founders: domain specialized agents…
- Abnormal AI — Behavioral AI email security with three named autonomous agents: a…
- AirMDR — AI native MDR whose AI analyst investigates every alert and writes…
- Airrived — Agentic OS that unifies SOC, GRC, IAM, vulnerability management, IT,…
- Andesite — Human-AI SOC platform where customers build their own agents and…
- Anvilogic — Agentic security operations platform that works on top of existing…
Alternatives to Terra Security
The closest documented capability profiles to Terra Security among security and SOC agents tracked by Agentic Index, ordered by similarity on the same 14 point evidence the rankings use. No vendor pays for placement.
- Noma Security7.0 / 14Fuller documented coverage on Integrations & Tool Calling
- Lasso Security7.0 / 14Adds documented APIs, SDKs & MCP Extensibility
- Repello AI8.0 / 14Adds documented APIs, SDKs & MCP Extensibility
- Ocean5.5 / 14Adds documented APIs, SDKs & MCP Extensibility
- Pillar Security7.5 / 14Adds documented Deployment & Data Residency
- Straiker8.5 / 14Adds documented Deployment & Data Residency and APIs, SDKs & MCP Extensibility
Similarity is computed from each vendor's Agentic Index coverage score evidence, axis by axis, not from the totals. How this evidence is graded