Frequently asked questions

BreachLine is a cybersecurity platform built by BreachLine Labs Limited (UK). Our core product is Nebula - an autonomous AI that performs black-box penetration testing against your infrastructure, applications, and APIs without prior knowledge of your systems.

Nebula is our autonomous pentesting AI. It coordinates specialist security agents against a written scope, plans and executes attacks, and reports findings with evidence. Risky production moves wait on your approval, and a UK engineer signs off every report before it is released.

Sign up, add your target domain or IP range, and confirm you have authorization to test. Nebula begins reconnaissance immediately. You'll receive findings via Slack or email as they're discovered - no scoping calls, no scheduling, no configuration files.

You need written authorization to test the target (required by law and our Terms of Service), a valid target URL, IP address, or CIDR range, and optionally any authentication credentials if you want authenticated testing coverage. That's it.

Nebula starts with zero knowledge and works outside-in. Within minutes you'll see reconnaissance data flowing in - open ports, technologies detected, potential entry points. Critical and high-severity findings are pushed to you immediately with proof-of-concept details. A full report is generated when the scan completes.

Nebula uses a ReAct (Reasoning + Acting) loop with chain-of-thought planning. It observes scan results, reasons about the most promising attack vectors, selects and executes tools, then adapts its strategy based on what it discovers - the same methodology a senior pentester uses, running autonomously at machine speed.

Each agent runs inside a sandboxed container pre-loaded with a full offensive toolkit including reconnaissance, exploitation, and post-exploitation tools. Nebula selects and chains tools dynamically based on what it discovers - it does not run a fixed playbook.

Nebula's orchestrator dispatches work to specialist agents (XSS hunter, SQLi specialist, SSRF expert, cloud misconfiguration detector, etc.) in three execution modes: sequential for methodical depth, parallel for speed, and swarm mode for complex multi-vector attack chains where agents share context.

Nebula maintains a multi-layer parallel memory architecture that persists reconnaissance data, discovered endpoints, tested attack vectors, and confirmed vulnerabilities across scan phases. This means later phases build on earlier discoveries rather than duplicating work.

Yes. Nebula integrates with Slack in real time. It sends critical findings immediately, provides progress updates, and you can ask it questions or adjust scope mid-engagement. It behaves like a team member in your Slack workspace, not a dashboard you have to check.

All data is encrypted at rest (AES-256) and in transit (TLS 1.3). Each customer's scan environment is isolated at the container level. Enterprise customers can deploy Nebula on-premise for complete data residency control with zero external telemetry.

Yes. This is non-negotiable. You must have explicit written authorization to test any system. Unauthorized testing is illegal under the Computer Misuse Act (UK), CFAA (US), and equivalent laws globally. Our Terms of Service require proof of authorization before scanning.

Yes. BreachLine Labs Limited is a UK-registered company operating under GDPR. We process only the data necessary to perform scans, provide clear data retention policies, and support data deletion requests. Enterprise customers with on-premise deployment retain full data sovereignty.

Yes. Nebula maps findings to OWASP Top 10, PCI-DSS, SOC 2, ISO 27001, NIST, and CWE in its reports. Mapping is a reporting feature, not a claim that BreachLine holds those certifications.

BreachLine Labs Limited is registered in England and Wales, headquartered at 60 Tottenham Court Road, Office 1377, Fitzrovia, London W1T 2EW. Cloud infrastructure is hosted in EU and UK regions by default, with configurable data residency for Enterprise customers.

Nebula covers the full web and infrastructure attack surface: injection flaws (SQLi, XSS, SSRF, XXE, command injection), authentication and session issues (OAuth, JWT, SAML, MFA bypass), access control failures (IDOR, privilege escalation), API vulnerabilities (REST, GraphQL), business logic flaws, and multi-step exploit chains.

Yes. You can provide session tokens, API keys, or login credentials. Nebula will authenticate into the application and test the authenticated attack surface: admin panels, user-specific endpoints, privilege escalation paths, and post-auth business logic that unauthenticated scanners cannot reach.

Yes. Nebula tests REST and GraphQL APIs for injection, broken authentication, excessive data exposure, and rate limiting issues. For cloud environments, it identifies misconfigurations in exposed services, storage buckets, IAM issues visible from an external perspective, and cloud-specific attack vectors.

Yes. Nebula joins Zoom, Google Meet, and Microsoft Teams live. Brief it there the way you brief a colleague. Email and Slack still work for everything else.

Four plans: Individual, Team, Business, and Enterprise. Individual is one engineer, one asset, from £399 per month ex VAT. Team is a shared engineer for a small team, from £899 per month. Business covers a growing org attack surface, from £2,299 per month. Enterprise is per seat and metered, from £199 per seat per month (minimum 5 seats). Every plan includes the Nebula engine, UK engineer sign-off on reports, free retests after a fix, an email address for each AI staff member, and live meeting join on Zoom, Google Meet, and Microsoft Teams. The full comparison is on /pricing.

Individual includes 400 credits per month, 1 AI staff member, 1 named seat, one web or API app tested continuously, and 100 alerts investigated with evidence. Team includes 1,000 credits, 1 AI staff member, 3 named seats, three web or API apps, and 150 alerts. Both roll unused credits for one month, bill overage at £1.00 per credit, and include email support next working day. See /pricing for the full table.

Business includes 2,800 credits per month, 1 AI staff member, 10 named seats, four web or API apps plus one network or cloud environment and one mobile app on a physical handset, and 500 alerts, with email support the same day. Enterprise is £199 per seat per month (minimum 5 seats), usage metered in arrears at £0.95 per credit, unlimited applications, network, cloud and mobile on usage, additional AI staff at £549 each, and a named engineer on priority response. Contact us via /contact for Enterprise.

We offer a guided demo where Nebula runs a live scan against a target you authorize, so you see real findings on your own infrastructure before committing. Request one via /contact.

Nebula connects to your Slack workspace via Socket Mode (no public URL required). It sends critical findings in real time, posts scan progress updates, and accepts commands directly in channel. You can ask Nebula questions, adjust scan scope, or request status updates, all within Slack.

Nebula generates detailed HTML reports with executive summaries, technical finding details, proof-of-concept reproduction steps, CVSS scoring, framework mappings (OWASP, PCI-DSS, SOC 2, ISO 27001, NIST, CWE), and prioritised remediation guidance. Reports can be exported for stakeholder distribution.

Yes. The BreachLine API lets you trigger scans, poll for status, and retrieve findings programmatically. This means you can integrate Nebula into your CI/CD pipeline to run security scans on every deployment to staging, blocking releases that introduce critical vulnerabilities.

Scan data is retained for the duration of your subscription. Enterprise customers can configure custom retention. All data can be deleted on request in compliance with GDPR.

Yes. In addition to Slack, Nebula sends email alerts for critical and high-severity findings as they're discovered, scan completion summaries, and weekly digest reports if continuous monitoring is enabled. Email notifications are configurable per scan and per severity level.