Pigeon Labs is an AI-native cybersecurity services company. We help startups solve their hardest security problems — real penetration tests, AI and agent attack-surface work, and high-stakes reviews when something can't wait.

What kinds of problems do you take on?

Web app and API offensive work, tenant auth and business logic, AI features (prompt injection, tool abuse, forged SMS/email/voice channels), pre-enterprise diligence, and help after a finding or incident.

Is this a product or a services engagement?

Services. You work with offensive security engineers. We may use AI to move faster, but the deliverable is a real engagement with evidence, impact, and remediation — not a scanner PDF.

How do I get started?

Email hello@pigeonlabs.ai with your hardest security problem. Prefer a lower commitment? Grab the free AI security playbook, or apply for the $1 pentest.

Don't let a security questionnaire kill your largest enterprise deal.

Other AI security companies sell platforms. We run the pentest, find what breaks, and hand your team the fixes.

Pigeon agent

Voice Channel Verified

Outbound call signing intact

2s ago

Agent Hijacked via Forged SMS

Unsigned webhook accepted fake text. Agent executed attacker instructions.

5s ago

Email Channel Secured

Input sanitization passed all injection tests

9s ago

Coordinating security agents...

[STATUS]

● ATTACKING

Done-for-you

Your engineers keep shipping. We own the test, the findings, and the fix list.

Unblock the deal

Get the report procurement needs to clear the security review.

AI attack surface

We attack the AI features enterprise buyers actually ask about.

Don't take it from us.

For the businesses, startups, folks out there needing cybersecurity, pen tests, SOC II, .. checkout and follow @appsecinsights. Founders in NYC are super smart. Can save you money and help you out. They do $1 Pen tests and post about cybersec on their feed/substack
— Vincent Liu (@VinceLiuSphere) September 10, 2026

“You showed up and got the job done in a couple of days, and you offered to come onsite, which not a lot of people do.”
Michael AspinwallCTO of Mason

What we find when we break in

Real exploit paths. Impact. What to fix first.

Pigeon Pentest

[STATUS]

ATTACKING

[MODE]

AUTO

Agent reconnaissance in progress...

Don't let a security questionnaire kill your largest enterprise deal.

Other AI security companies sell platforms. We run the pentest, find what breaks, and hand your team the fixes.

Pigeon agent

Voice Channel Verified

Outbound call signing intact

2s ago

Agent Hijacked via Forged SMS

Unsigned webhook accepted fake text. Agent executed attacker instructions.

5s ago

Email Channel Secured

Input sanitization passed all injection tests

9s ago

Coordinating security agents...

[STATUS]

● ATTACKING

Done-for-you

Your engineers keep shipping. We own the test, the findings, and the fix list.

Unblock the deal

Get the report procurement needs to clear the security review.

AI attack surface

We attack the AI features enterprise buyers actually ask about.

Don't take it from us.

For the businesses, startups, folks out there needing cybersecurity, pen tests, SOC II, .. checkout and follow @appsecinsights. Founders in NYC are super smart. Can save you money and help you out. They do $1 Pen tests and post about cybersec on their feed/substack
— Vincent Liu (@VinceLiuSphere) September 10, 2026

“You showed up and got the job done in a couple of days, and you offered to come onsite, which not a lot of people do.”
Michael AspinwallCTO of Mason

What we find when we break in

Real exploit paths. Impact. What to fix first.

Pigeon Pentest

[STATUS]

ATTACKING

[MODE]

AUTO

Agent reconnaissance in progress...

Don't let a security questionnaire kill your largest enterprise deal.

Don't take it from us.

What we find when we break in

We'll break into your app for $1.

Don't let a security questionnaire kill your largest enterprise deal.

Don't take it from us.

What we find when we break in

We'll break into your app for $1.