VORNAC GmbH | automated, AI-based penetration testing
Company Profile
VORNAC GmbH, headquartered in Heidelberg, is a German provider of automated, AI-based penetration testing and continuous security validation, founded in 2026. VORNAC does not offer conventional, manually performed security assessments. Instead, an autonomous AI agent tests production IT environments using non-destructive attack techniques.
VORNAC develops and operates its platform in Germany. According to the company, tests, findings, and reports are processed exclusively in German data centers; US cloud services and transfers to third countries are avoided
Service Portfolio
Continuous Penetration Testing
- Autonomous security testing of production IT environments
- Testing with every release, on a schedule, or on demand
- Integration through CI/CD webhooks and API
- Attack techniques and multi-stage attack chains
- Proof of exploitability through reproducible proofs of concept
- Assessment of business risk and specific remediation recommendations
- Versioned, audit-ready reports and ticketing integration
Testing Areas
- Web applications and APIs
- External attack surfaces and publicly accessible services
- Cloud workloads, containers, and Kubernetes environments
- Internal networks and network segmentation
- Active Directory, Entra ID, and Microsoft 365
- Identity and access management, including SSO and MFA
Compliance and Audit Support
- Documentation for NIS2
- Support for DORA, VAIT, and BAIT requirements
- Support for TISAX requirements
- Alignment with ISO/IEC 27001 and BSI standards
Contact Details
- Address: Carl-Friedrich-Gauß-Ring 5, 69124 Heidelberg, Germany
- Phone: +49 6221 6479525
- Email: hello@vornac.com
- Website: https://www.vornac.com
- Commercial Register: HRB 757584, Mannheim Local Court
- Managing Directors: André Feigenbutz and Arthur Raess
Section Navigation
binsec academy GmbH – Advanced Pentest Training Lab
binsec academy GmbH operates the Pentest Training Lab, a highly practical online platform dedicated to real penetration testing. Simulating complex corporate networks and advanced real-world attack scenarios within isolated lab environments, it is engineered to sharpen the skills of aspiring and professional penetration testers. Upon conquering our rigorous, fully practical examination, participants earn the distinguished Binsec Academy Certified Pentest Professional (BACPP) designation — proving their technical capability to methodically uncover and evaluate vulnerabilities in modern IT infrastructures.
Explore the Pentest Training Lab
binsec GmbH – Experts in Penetration Testing
binsec GmbH is a highly specialized penetration testing provider and the operative pentesting core of the binsec group. Since 2013, the company has focused exclusively on high-end, human-led penetration tests (pentests) and advanced red team simulations. Rejecting automated scans, our team of permanently employed, certified senior pentest experts delivers manual deep-dive assessments of critical digital systems: from web applications and APIs to mobile apps, complex network infrastructures, and cloud environments. As a dedicated assessment partner for highly regulated sectors such as Payment, Banking, and Healthcare, binsec GmbH provides clear risk evaluations and actionable reports to effectively secure business-critical systems.
Get Manual Expert Penetration Testing Services