Observed arrival · 2026-11-08
EvilPet: Red-team findings with receipts
A security product that says it tests websites or GitHub repositories with autonomous agents, then supplies exploit evidence and proposed fixes.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Teams testing their own websites and GitHub repositories
- Worth noticing
- The sample finding pairs an SSRF description with request evidence and a proposed host-allowlist patch; the page says repo fixes can arrive as pull requests.
Field notes
The example report is structured around a finding, request evidence, a proof-of-concept explanation, and a suggested code change. Its illustrated issue is an SSRF risk involving a user-controlled outbound request and a cloud metadata endpoint. The page describes agent-driven testing and pull-request fixes as product capabilities; those claims are not independently verified by the supplied homepage extract.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
⊠LoginAccess appeared gated
$PaidCommerce or pricing visible
✦PrettyNotable craft visible
◎NicheUnusually specific use
One card from the complete issue