Question 1

What is BreachLine?

Accepted Answer

BreachLine is a cybersecurity platform built by BreachLine Labs Limited (UK). Our core product is Nebula - an autonomous AI that performs black-box penetration testing against your infrastructure, applications, and APIs without prior knowledge of your systems.

Question 2

What is Nebula?

Accepted Answer

Nebula is our autonomous pentesting AI. It coordinates a team of specialist security agents, each with access to a sandboxed environment loaded with a full offensive toolkit. Nebula reasons, plans multi-step attacks, executes them, and reports findings in real time - no human operator required.

Question 3

How do I get started?

Accepted Answer

Sign up, add your target domain or IP range, and confirm you have authorization to test. Nebula begins reconnaissance immediately. You'll receive findings via Slack or email as they're discovered - no scoping calls, no scheduling, no configuration files.

Question 4

What do I need before my first scan?

Accepted Answer

You need written authorization to test the target (required by law and our Terms of Service), a valid target URL, IP address, or CIDR range, and optionally any authentication credentials if you want authenticated testing coverage. That's it.

Question 5

What does a first scan experience look like?

Accepted Answer

Nebula starts with zero knowledge and works outside-in. Within minutes you'll see reconnaissance data flowing in - open ports, technologies detected, potential entry points. Critical and high-severity findings are pushed to you immediately with proof-of-concept details. A full report is generated when the scan completes.

Question 6

How does Nebula's AI reasoning work?

Accepted Answer

Nebula uses a ReAct (Reasoning + Acting) loop with chain-of-thought planning. It observes scan results, reasons about the most promising attack vectors, selects and executes tools, then adapts its strategy based on what it discovers - the same methodology a senior pentester uses, running autonomously at machine speed.

Question 7

What tools does Nebula execute?

Accepted Answer

Each agent runs inside a sandboxed container pre-loaded with a full offensive toolkit including reconnaissance, exploitation, and post-exploitation tools. Nebula selects and chains tools dynamically based on what it discovers - it does not run a fixed playbook.

Question 8

How do the specialist agents coordinate?

Accepted Answer

Nebula's orchestrator dispatches work to specialist agents (XSS hunter, SQLi specialist, SSRF expert, cloud misconfiguration detector, etc.) in three execution modes: sequential for methodical depth, parallel for speed, and swarm mode for complex multi-vector attack chains where agents share context.

Question 9

What is Nebula's memory system?

Accepted Answer

Nebula maintains a multi-layer parallel memory architecture that persists reconnaissance data, discovered endpoints, tested attack vectors, and confirmed vulnerabilities across scan phases. This means later phases build on earlier discoveries rather than duplicating work.

Question 10

Can I communicate with Nebula during a scan?

Accepted Answer

Yes. Nebula integrates with Slack in real time. It sends critical findings immediately, provides progress updates, and you can ask it questions or adjust scope mid-engagement. It behaves like a team member in your Slack workspace, not a dashboard you have to check.

Question 11

How is scan data secured?

Accepted Answer

All data is encrypted at rest (AES-256) and in transit (TLS 1.3). Each customer's scan environment is isolated at the container level. Enterprise customers can deploy Nebula on-premise for complete data residency control with zero external telemetry.

Question 12

Do I need authorization to test a target?

Accepted Answer

Yes — this is non-negotiable. You must have explicit written authorization to test any system. Unauthorized testing is illegal under the Computer Misuse Act (UK), CFAA (US), and equivalent laws globally. Our Terms of Service require proof of authorization before scanning.

Question 13

Is BreachLine GDPR compliant?

Accepted Answer

Yes. BreachLine Labs Limited is a UK-registered company operating under GDPR. We process only the data necessary to perform scans, provide clear data retention policies, and support data deletion requests. Enterprise customers with on-premise deployment retain full data sovereignty.

Question 14

Can Nebula map findings to compliance frameworks?

Accepted Answer

Yes. Nebula automatically maps discovered vulnerabilities to OWASP Top 10, PCI-DSS, NIST, CWE, and other frameworks in its reports. This helps your compliance team understand exactly which requirements are affected by each finding — saving hours of manual cross-referencing.

Question 15

Where is BreachLine based?

Accepted Answer

BreachLine Labs Limited is registered in England and Wales, headquartered at 60 Tottenham Court Road, Office 1377, Fitzrovia, London W1T 2EW. Cloud infrastructure is hosted in EU and UK regions by default, with configurable data residency for Enterprise customers.

Question 16

What types of vulnerabilities can Nebula find?

Accepted Answer

Nebula covers the full web and infrastructure attack surface: injection flaws (SQLi, XSS, SSRF, XXE, command injection), authentication and session issues (OAuth, JWT, SAML, MFA bypass), access control failures (IDOR, privilege escalation), API vulnerabilities (REST, GraphQL), business logic flaws, and multi-step exploit chains.

Question 17

What scan modes are available?

Accepted Answer

Six modes: QUICK (fast surface-level check, minutes), RECON (deep reconnaissance and asset discovery), FULL (comprehensive vulnerability assessment), DEEP (exhaustive testing with complex attack chains), RED_TEAM (adversarial simulation with chained exploits), and API (dedicated API endpoint testing). Each mode has LLM-driven ceilings that determine depth and duration.

Question 18

Does Nebula support authenticated testing?

Accepted Answer

Yes. You can provide session tokens, API keys, or login credentials. Nebula will authenticate into the application and test the authenticated attack surface — admin panels, user-specific endpoints, privilege escalation paths, and post-auth business logic that unauthenticated scanners cannot reach.

Question 19

Can Nebula test APIs and cloud infrastructure?

Accepted Answer

Yes. Nebula tests REST and GraphQL APIs for injection, broken authentication, excessive data exposure, and rate limiting issues. For cloud environments, it identifies misconfigurations in exposed services, storage buckets, IAM issues visible from an external perspective, and cloud-specific attack vectors.

Question 20

What plans do you offer?

Accepted Answer

Three tiers — Starter, Professional and Enterprise. Starter replaces an annual pentest for a single scope. Professional puts an AI security engineer in your Slack across multiple targets with continuous coverage. Enterprise adds dedicated deployment, custom agents and scale. All three are priced to the engagement rather than a public per-seat rate — contact sales@breachline.io and we will scope it with you.

Question 21

What is included in the Starter plan?

Accepted Answer

Starter includes 1 target, all scan modes (QUICK through RED_TEAM), real-time Slack and email alerts, full vulnerability reports with remediation guidance, compliance framework mapping, and API access. It's the full Nebula experience for a single asset.

Question 22

What does Enterprise include beyond Pro?

Accepted Answer

Enterprise adds on-premise or private cloud deployment (your infrastructure, your data), a dedicated Nebula instance, custom specialist agents built for your tech stack, extended data retention, SSO/SAML integration, a dedicated customer success engineer, and SLA-backed support. Contact sales@breachline.io.

Question 23

Is there a free trial?

Accepted Answer

We offer a guided demo where Nebula runs a live scan against a target you authorize. This lets you see real findings on your own infrastructure before committing. Contact us at sales@breachline.io to schedule a demo.

Question 24

How does the Slack integration work?

Accepted Answer

Nebula connects to your Slack workspace via Socket Mode (no public URL required). It sends critical findings in real time, posts scan progress updates, and accepts commands directly in channel. You can ask Nebula questions, adjust scan scope, or request status updates, all within Slack.

Question 25

What report formats are available?

Accepted Answer

Nebula generates detailed HTML reports with executive summaries, technical finding details, proof-of-concept reproduction steps, CVSS scoring, framework mappings (OWASP, PCI-DSS, CWE), and prioritised remediation guidance. Reports can be exported for stakeholder distribution.

Question 26

Is there API access for CI/CD integration?

Accepted Answer

Yes. The BreachLine API lets you trigger scans, poll for status, and retrieve findings programmatically. This means you can integrate Nebula into your CI/CD pipeline to run security scans on every deployment to staging — blocking releases that introduce critical vulnerabilities.

Question 27

How long is scan data retained?

Accepted Answer

Scan data is retained according to your plan tier. Starter and Pro plans retain data for the duration of your subscription. Enterprise customers can configure custom retention policies. All data can be deleted on request in compliance with GDPR.

Question 28

Does Nebula support email notifications?

Accepted Answer

Yes. In addition to Slack, Nebula sends email alerts for critical and high-severity findings as they're discovered, scan completion summaries, and weekly digest reports if continuous monitoring is enabled. Email notifications are configurable per scan and per severity level.

Frequently asked questions

Getting Started

How Nebula Works

Security & Compliance

Capabilities & Coverage

Pricing & Plans

Technical & Integration

Still have questions?