talon by lorikeet security, one portal for pentests, IR, and compliance (free account)

hey all,

wanted to share something i've been poking at: talon, the client platform from lorikeet security. link: lorikeetsecurity.com/talon

the short version is it puts pentests, incident response, compliance readiness, findings, and reports in one portal instead of spread across pdfs, email threads, and a spreadsheet someone forgot to update. findings from pentests, scans, and incidents all roll up into one posture view the whole team can see.

a few things i think are worth knowing:

• lory, the ai pentester. she runs 57 attack playbooks against your authorized scope, follows signals through to an actual exploit path, and writes up the finding with evidence. every finding gets reviewed by a human before it reaches you, which is the part that matters to me. no pile of unverified scanner noise.

• human-led tests too. they run human pentesters and lory against the same scope, so you're not stuck choosing one or the other.

• open-source tooling. there's an in-network agent (host discovery, patch and vuln state, inventory) so internal assets can be tested from behind the perimeter, a cli for pulling findings and requesting retests from your terminal, and a vs code extension that flags issues while you write code. it's all on their github.

• free retesting and live findings in the portal, so you're not waiting on a final report to start fixing things.

you can make a free account and look around, and there's also a free website scanner on the site if you just want to kick the tires first.

happy to answer questions if anyone's curious.