About

Built for researchers. Open by default.

Xtrinel exists for independent security researchers, bug bounty hunters, and penetration testers who work at the frontier of AI security. We build free, open-source tools first, and commercial products for those who need more.

Software, backed by research

Xtrinel builds security software for the agentic AI era. VAAST is how teams find out what their AI systems can actually be made to do. That software is backed by HYDRACUDA, our research division, which does the offensive work that keeps VAAST ahead of how these systems actually get broken. Every detection we ship traces back to a HYDRACUDA writeup. Every finding includes the exact payload and model response, exportable as JSON or HTML. Every offensive engagement requires written authorization. These aren't marketing claims: they're the three rules that determine whether work ships at Xtrinel.

Open source as proof of work

HYDRACUDA is built on published research from our offensive work. Every finding published has a reproducible proof-of-concept. These are not loss leaders for an enterprise upsell. They are tools and findings we built because we needed them, released because the community needs them too.

VAAST: when you need more

VAAST is our desktop platform for AI security testing: prompt injection, tool-call abuse, RAG poisoning, and agentic pipeline flaws, all delivered as reproducible finding scripts. The free tier covers the basics. Pro gives you the full offensive toolkit. Enterprise adds team management for organizations that need it.

Get in touch

[email protected] —Product support
[email protected] —Sales and enterprise inquiries
[email protected] —Responsible disclosure
[email protected] —Legal and compliance

Headquartered in Columbus, Ohio. Working with researchers across North America and Europe.