STAR Registry Listing for
Freya Pentest Agent
Freya Pentest Agent
Freya Pentest Agent is an AI-assisted offensive security assessment and penetration testing SaaS platform developed by PT Innoveam Indonesia. It provides enterprise security teams and auditors with an integrated, tenant-isolated workspace to plan, execute, validate, and report authorized security assessments across Web applications, REST/GraphQL APIs, and internal network environments.
Core Cloud Service Capabilities: - Guided Offensive Security Workspace: Combines AI-assisted reconnaissance, vulnerability discovery, and human-in-the-loop validation with strict Rules of Engagement (RoE) enforcement. - Reproducible Technical Evidence & PoC: Orchestrates standardized security testing engines (Nuclei, Nmap, Subfinder, Httpx, Katana, FFUF) and captures full terminal telemetry and reproducible Proof of Concept (PoC) artifacts. - Hybrid Cloud & Local Agent Bridge: Supports encrypted WebSocket pairing with the optional Freya Local Agent for authorized internal network assessments. - Automated Compliance & A4 Executive Reporting: Generates bilingual (Indonesian & English) A4 PDF security audit reports with automated MITRE CWE™ taxonomy mapping, FIRST CVSS v3.1 vector risk scoring, and OWASP Top 10 (2026), NIST SP 800-115, PTES, and CSA CCM v4.1 alignment.


Listed Since: 10/19/2026
STAR Level 1

CAIQ Self-assessment v4.1.0
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Created or renewed about 7 hours ago, on October 19, 2026.
STAR for AI Level 1

AI CAIQ Self-assessment v1.1.0
Offers an industry-accepted way to document what security controls exist in solutions that include AI components or are AI products. It provides a set of Yes/No questions a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Artificial Intelligence Controls Matrix (AICM).
Created or renewed about 6 hours ago, on October 19, 2026.