--- title: "HackerAI Alternative: Per-Token Models, No Monthly Plan" canonical: https://pentestllm.ai/hackerai-alternative generated: 2026-11-12T07:12:07.191Z source: https://pentestllm.ai/hackerai-alternative base_url: https://api.pentestllm.ai/v1 --- ![Components on a printed circuit board](https://pentestllm.ai/img/circuit.webp) ## What HackerAI is, as of November 2026 HackerAI’s site, read on 11 November 2026, calls it an AI-powered penetration testing assistant. Its product page describes two modes. Ask is for focused analysis. Agent plans and runs multi-step work with a terminal and a browser, and saves confirmed issues as reports with severity, evidence, reproduction steps and a suggested fix. It is offered on the web, as a desktop app and as a mobile web app, and its source code is public on GitHub. Agent mode runs in one of two places. Local execution, through the desktop app or a command-line agent, runs commands on your own machine with your user’s privileges; the page says there is no container isolation and recommends a dedicated testing machine. Cloud execution runs in an isolated sandbox the company hosts. You set a permission level per task, from asking for approval each time to full access. ## HackerAI plans and what they include Its pricing page on the same day listed five plans. Free includes a basic model, limited responses and agent mode with the local sandbox. Pro is $29 a month, or $24 a month billed yearly, and adds more capable models, file uploads, cloud agents and the maximum context window. Pro+ is $60 a month with three times Pro’s usage, Ultra is $200 a month with ten times, and Team is $40 a seat each month with central billing. The paid individual plans can continue past their included usage from a separate prepaid balance if you turn that on. None of the pages we read described a public API for calling its models from your own code. The model is reached through HackerAI’s own interfaces. ## Assistant with plans, or model by the token - What you buy: HackerAI: an assistant with a chat, an agent, a sandbox and reports. PentestLLM: the model endpoint, and nothing around it. - Where the agent runs: HackerAI: in its cloud sandbox or through its local app. PentestLLM: wherever your own agent runs; the API only answers requests. - Billing: HackerAI: a monthly plan with included usage, per its pricing page. PentestLLM: per token from a prepaid balance, with no plan. - Model choice: HackerAI: the models your plan includes. PentestLLM: any listed build per request, or the `auto/security` router. - Automation: PentestLLM can be called from scripts, CI jobs and tools you write, in the OpenAI or the Anthropic wire format. ## What PentestLLM gives you An OpenAI-compatible endpoint at `https://api.pentestllm.ai/v1` and an Anthropic-compatible Messages endpoint on the same key. 9 security-tuned builds, with abliterated and uncensored builds beside them and context windows up to 1M tokens. The id `auto/security` picks a fast, balanced or frontier security build for each request and bills at that build’s price. When a request declares them, web search ($0.01 per search), page fetch ($0.001 per page fetched), a code sandbox ($0.05 per container-hour, 1-minute minimum) and remote MCP (No tool fee) run on the API side. PentestLLM ships no agent, no chat app and no desktop app. The builds answer security questions other models decline; expect reduced refusals, not none. ## Building the same workflow yourself The parts of an assistant can be assembled from open tools. A terminal agent such as [OpenCode](https://pentestllm.ai/agents/opencode) or [Claude Code](https://pentestllm.ai/agents/claude-code) plans and proposes commands, and you decide which need approval. The [Kali MCP guide](https://pentestllm.ai/agents/kali-mcp) connects command execution on a Kali machine. [Cline](https://pentestllm.ai/agents/cline) and [Cursor](https://pentestllm.ai/agents/cursor) do the same inside an editor. Reports are drafted by the model from your notes, in your own template. That is setup work a hosted assistant spares you. In return the workflow is yours, usage is billed per token, and an idle month costs nothing. On 2026-11-12 input prices for security builds start at $0.40 per million tokens, and the table below is the live catalog. ## When HackerAI is the better choice If you want to sign in and start, with an agent, a hosted sandbox, file uploads and saved findings already in place, HackerAI’s pages describe that and an API does not provide it. Its Free plan lets you try agent mode locally without paying, and a fixed monthly price is easy to budget when your use is steady. A team that wants shared seats and one invoice has a plan for that. Choose the API when you live in a terminal or an editor, when you want to script the model, or when your usage is uneven. Whichever you use, HackerAI’s product page says the tool does not replace your authorization, and the same holds here: test only systems you own or have written permission to test, per the [acceptable use policy](https://pentestllm.ai/acceptable-use). ## 9 security builds, priced per token Read from the live catalog on 2026-11-12. Prices are US dollars per million tokens, paid from a prepaid balance that starts at $10. The id `auto/security` has no price of its own: each request is billed at the build that answered. | Build | Input | Output | Context | | --- | --- | --- | --- | | [Qwen3.8 27B Cybersecurity](https://pentestllm.ai/models/qwen3.8-27b-cybersecurity) | $0.40 | $2.40 | 262,144 | | [Gemma 4 26B A4B Cybersecurity](https://pentestllm.ai/models/gemma-4-26b-a4b-it-cybersecurity) | $0.4224 | $1.3376 | 262,144 | | [GLM-5.3 Flash Cybersecurity](https://pentestllm.ai/models/glm-5.3-flash-cybersecurity) | $0.5093 | $1.6975 | 1,048,576 | | [Red Team (Flash)](https://pentestllm.ai/models/uplink-red-team-flash) | $0.90 | $3.00 | not published | | [Red Team (Pro)](https://pentestllm.ai/models/uplink-red-team-pro) | $1.50 | $6.00 | not published | | [OrcaCyber MiniMax M3.1 Flash](https://pentestllm.ai/models/minimax-m3.1-flash-cybersecurity) | $2.00 | $4.00 | 261,632 | | [OrcaCyber Qwen3.8 Flash Next](https://pentestllm.ai/models/orcacyber-qwen3.8-flash-next) | $2.00 | $4.00 | 261,632 | | [Cyber Frontier](https://pentestllm.ai/models/cyber-frontier) | $5.25 | $15.75 | 1,048,576 | | [OrcaCyber Zero 1.5](https://pentestllm.ai/models/orca-zero-1.5-cybersecurity) | $7.50 | $18.75 | 999,488 | [Full price list and tool fees](https://pentestllm.ai/pricing) · [Every model](https://pentestllm.ai/models) · [API docs](https://pentestllm.ai/docs) ## Questions - Per its own site in November 2026, an AI-powered penetration testing assistant with an Ask mode and an Agent mode, available on the web, as a desktop app and as a mobile web app. - On 11 November 2026 its pricing page listed Free, Pro at $29 a month, Pro+ at $60, Ultra at $200 and Team at $40 a seat each month, with lower prices on yearly billing. Check hackerai.co for current plans. - The home, product and pricing pages we read in November 2026 did not describe a public API. PentestLLM is an API only, with OpenAI-compatible and Anthropic-compatible endpoints. - No. PentestLLM is the model API. You connect it to an agent you run, such as OpenCode or Claude Code, and that agent runs tools under your approval rules. - No. There is no subscription and no free plan. The balance is prepaid from $10 by card, and on 2026-11-12 input prices for security builds start at $0.40 per million tokens. ## Read next - [HackerGPT alternative Pay-per-token security models with an API, next to the hosted assistants.](https://pentestllm.ai/hackergpt-alternative) - [Penligent alternative Models for your own agent and scripts, next to a packaged pentest app.](https://pentestllm.ai/penligent-alternative) - [XBOW alternative Models for your own agent, next to an autonomous pentest platform.](https://pentestllm.ai/xbow-alternative) - [Hacker AI Security-tuned models by API for ethical hacking and authorized testing.](https://pentestllm.ai/hacker-ai) Facts about other products and tools on this page were read from their own pages on 11 November 2026: [hackerai.co](https://hackerai.co/), [hackerai.co product](https://hackerai.co/product), [hackerai.co pricing](https://hackerai.co/pricing), [HackerAI on GitHub](https://github.com/hackerai-tech/hackerai). They change; check the source before relying on a figure. ## One key, from $10 PentestLLM is for systems you own or have written permission to test. The [acceptable use policy](https://pentestllm.ai/acceptable-use) says what is not allowed. [Get a key](https://app.pentestllm.ai/console) usage, 1,000 agent turns on Qwen3.8 27B Cybersecurity - Input, 8,000 tokens at $0.40 per million: $0.0032 - Output, 1,000 tokens at $2.40 per million: $0.0024 - One turn: $0.0056 - 1,000 turns: $5.60 output price per million tokens, 9 builds $1.3376 Gemma 4 26B A4B Cybersecurity OrcaCyber Zero 1.5 $18.75