Introducing Pinion
An agentic penetration tester for internal networks.
Internal testing produces more raw results than any tester can work through by hand. Pinion reads all of it, works out what is real, and flags the leads worth a human's time. A Sprocket tester then drives those leads to their real impact.
More of what matters on your internal network, with its real impact shown.
Pinion at work with Sprocket Testers
Two real internal tests, two domain compromises. In each one, Pinion surfaced the lead and a Sprocket tester drove it to full impact.
Backup appliance exposure
Backup Appliance Exposure to Hypervisor Takeover and Domain Compromise
One backup appliance open to anonymous access became full control of Active Directory, plus every virtual machine the hypervisor fleet manages.
Why it matters:
- The critical path surfaced on day one. Pinion rated the appliance critical from its share names and service identity, so the tester spent day one proving the path instead of hunting for it.
- It saw what scanners miss. A scanner flags anonymous SMB. Pinion reasoned about what the shares likely held: configuration snapshots and SQL dumps with operator credentials.
- No history required. This was the client's first internal pentest, with no prior findings or remediation cycle to build on.
Provisioning regression
Transient Test Host Credential Capture to Lateral Movement to Domain Compromise
A fix applied across the whole fleet missed one new host. Its reused local admin password led to full domain compromise.
Why it matters:
- It caught a regression. Pinion saw broadcast poisoning answering again on a segment where the issue had been fixed in a prior engagement.
- Fixes don't stay fixed on their own. The new host was never domain-joined, so Group Policy never pushed the fix to it. An annual retest of the hardened fleet would have marked the issue closed.
- A small gap reached the whole domain. One local admin password, reused on three domain-joined hosts, led to the domain controller and every user's password hash.
Built for trust
The industry is racing to put AI agents inside customer environments. Pinion is the measured version: real value from AI, deployed safely.
Off your network
Pinion is never placed on your internal infrastructure. The deterministic tooling collects the data. The agent reasons over it from inside Sprocket's boundary.
Zero data retention
Your data runs the testing and the analysis. It is not retained by, or used to train, any underlying model.
Single-tenant context
Your testing data is never cross-referenced with other customers' data.
Kill switch
The Stop Testing control you already use halts internal runs along with all other active testing.
Hosting
Pinion runs on leading frontier models through AWS Bedrock, inside Sprocket's environment.
Questions?
Your Sprocket Account Manager can tell you whether Pinion is running for you, and how to add internal network testing.
