--- title: "About the security LLM API and who runs it" canonical: https://pentestllm.ai/about generated: 2026-11-11T18:03:05.641Z source: https://pentestllm.ai/about base_url: https://api.pentestllm.ai/v1 --- ## Who it is for Penetration testers, red teams, bug bounty hunters, CTF players and the engineers who defend against them. The work is triaging scanner output, explaining a CVE, reviewing code for vulnerabilities, drafting report findings, writing detection rules and solving CTF challenges. Stock assistants often decline these questions; the builds here are chosen because they decline fewer of them. Refusals are reduced, not removed. The service is for authorized testing only: systems you own, or systems you have written permission to test. The [acceptable use policy](https://pentestllm.ai/acceptable-use) says what is not allowed, and it is enforced. You must be 18 or older. ## Who runs it Uplink Switch LLC is a Wyoming limited liability company. It runs the gateway, the console where keys and top-ups live, and the API at api.pentestllm.ai. It does not train models. Each request goes to a host that serves the build, the answer comes back, and the gateway records what was billed. The hosts are not named on this site. The models are, each with its price and its result from the daily check. ## What the daily check does Once a day every model on sale gets the same fixed test prompt and is asked for a single output token. The input token count comes from the model’s own tokenizer, so a genuine build reports the same count day after day. A swapped model, or instructions slipped into the prompt on the way, shows up as a different count. On 2026-11-11, 36 of 39 listed models held their count. The [daily check page](https://pentestllm.ai/proof) lists every model with its verdict: steady since a date, changed on a date, or not checked yet. It is evidence, not proof. Two builds that share a tokenizer report the same count, so the check catches a different model or an added prompt, not a swap between two tunes of one base. daily check, 2026-11-11 36of 39 steady One cell per listed model; hover a cell for its verdict. ## How billing works You top up a prepaid balance in the [console](https://app.pentestllm.ai/console) from $10. Each request settles against it at the input and output prices on its model’s row of the [pricing page](https://pentestllm.ai/pricing), counted to the token. Larger top-ups add bonus credit: 5% from $200, 10% from $500, 15% from $1,000. A request that fails before the model answers costs nothing. When the balance can no longer cover a request, the API answers 402 and stops. No subscription is required and credit has no expiry date. The [refund policy](https://pentestllm.ai/refunds) covers billing errors. usage, 1,000 agent turns on Qwen3.8 27B Cybersecurity - Input, 8,000 tokens at $0.40 per million: $0.0032 - Output, 1,000 tokens at $2.40 per million: $0.0024 - One turn: $0.0056 - 1,000 turns: $5.60 ## What we keep One usage record per request: the request id, the model, token counts and the charge. Next to it, SHA-256 fingerprints of the request and the response, never the text. Prompts and completions pass through and are not written anywhere, unless you turn on replay for a key, which keeps that key’s request bodies for 7 days. The hosts that run the models receive the request and the response for the calls they serve. The [privacy page](https://pentestllm.ai/privacy) has the full list. ## Reporting a problem Abuse of the service: [abuse@pentestllm.ai](mailto:abuse@pentestllm.ai), no account needed. A vulnerability in the service itself: the [disclosure policy](https://pentestllm.ai/security). Everything else: [hello@pentestllm.ai](mailto:hello@pentestllm.ai) or the [contact page](https://pentestllm.ai/contact). ## Company Uplink Switch LLC, 1309 Coffeen Ave STE 20866, Sheridan, WY 82801. Keys and top-ups live in the [console](https://app.pentestllm.ai/console).