Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.




Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.

CSAI FoundationChaptersEventsBlog
Join AI Trust Talks on October 21 and December 9 for 20-minute webinars exploring AI, identity, and data security risks →

STAR Registry Listing for

Freya Pentest Agent

Freya Pentest Agent

Freya Pentest Agent is an AI-assisted offensive security assessment and penetration testing SaaS platform developed by PT Innoveam Indonesia. It provides enterprise security teams and auditors with an integrated, tenant-isolated workspace to plan, execute, validate, and report authorized security assessments across Web applications, REST/GraphQL APIs, and internal network environments.

Core Cloud Service Capabilities: - Guided Offensive Security Workspace: Combines AI-assisted reconnaissance, vulnerability discovery, and human-in-the-loop validation with strict Rules of Engagement (RoE) enforcement. - Reproducible Technical Evidence & PoC: Orchestrates standardized security testing engines (Nuclei, Nmap, Subfinder, Httpx, Katana, FFUF) and captures full terminal telemetry and reproducible Proof of Concept (PoC) artifacts. - Hybrid Cloud & Local Agent Bridge: Supports encrypted WebSocket pairing with the optional Freya Local Agent for authorized internal network assessments. - Automated Compliance & A4 Executive Reporting: Generates bilingual (Indonesian & English) A4 PDF security audit reports with automated MITRE CWE™ taxonomy mapping, FIRST CVSS v3.1 vector risk scoring, and OWASP Top 10 (2026), NIST SP 800-115, PTES, and CSA CCM v4.1 alignment.

Offers an industry-accepted way to document what security controls exist in solutions that include AI components or are AI products. It provides a set of Yes/No questions a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Artificial Intelligence Controls Matrix (AICM).
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Information about Freya Pentest Agent
Listed Since: 10/19/2026

STAR Level 1

Cloud Controls Matrix

CAIQ Self-assessment v4.1.0

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).

Created or renewed about 7 hours ago, on October 19, 2026.

STAR for AI Level 1

AI Controls Matrix

AI CAIQ Self-assessment v1.1.0

Offers an industry-accepted way to document what security controls exist in solutions that include AI components or are AI products. It provides a set of Yes/No questions a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Artificial Intelligence Controls Matrix (AICM).

Created or renewed about 6 hours ago, on October 19, 2026.