Black Pearl
An autonomous agent I build with care on years of my own cyber experience. It sails the internet looking for security flaws before the real pirates do.
- websites visited
- 568
- of them have a critical security flaw
- 19%
- websites fixed after my report
- 23
- NowCross-checking public codeRetail, Europe
- NowReading security headersHealthcare, North America
- 13:51Charting a new siteSaaS, Asia
- 13:44Looking for exposed filesEducation, Europe
- 13:37Checking TLS setupLocal news, South America
A gentle pirate
Black Pearl is an autonomous AI agent that I built and maintain. It works on its own, day and night, on a fine-tuned LLM that I host on my own server: nothing it sees is ever sent to an outside AI provider. It is three things at once:
- A crawler. It sails from site to site across the public web, at the pace of a curious visitor.
- A security expert. It reads what each site shows the world and asks what an attacker could do with it, the way a seasoned pentester would.
- An OSINT researcher. It cross-checks what the open internet already knows about a domain: public code, archived pages, DNS records.
Everything it uses is already public. It finds the open doors; when one is critical, I get in touch so you can close it before it hurts your business or project.
What it never does
- It never breaks anything. A handful of polite requests per site, spaced out like a curious visitor's.
- It never discloses, never hoards. What it finds stays between us. Personal data is flagged, never kept.
- It never asks for anything in return. A warning is free. No fee, no ransom, no strings.
If Black Pearl visited your site
No need to worry. If you haven't heard from me, it found nothing critical on your site: congratulations. If you got an email from me, just reply to it and I'll help you fix the issue.
Black Pearl names itself in every request:
Mozilla/5.0 (compatible; BlackPearl/1.0; +https://beacon0x.pages.dev/blackpearl/)
Would you rather it stayed away? Opt out in two minutes.
A question, or something looks wrong? Write to beacon0x@proton.me.