Hackian on the GAMMA-Ray Spectrum: A– · R2 · C1 · O1

PrompTugal.news draft · from the GAMMA-Ray report · beta · 2026-11-10

The GAMMA-Ray studio reads Ethiack's Hackian from its public pages: an agent that tests a customer's attack surface itself within a written policy, with published benchmark results that will count once its data use is documented.

Ethiack, founded in Coimbra, Portugal, in 2022, sells an offensive security platform whose AI agent, Hackian, maps an organisation's attack surface and tests it for exploitable vulnerabilities. We read it only from public sources, captured and hashed on 10 November 2026, and the published rules computed the card.

Autonomy: not yet evidenced, and close. Hackian works across a customer's whole in-scope attack surface and runs exploitation routines itself, and Universidade do Porto, Jumia and CEGID are named customers. What the rules also ask for is a public statement of how a person takes part while it acts; one page would set the level.

Reach 2, Integrated. Hackian tests across the systems of an attack surface, and with a Beacon the customer deploys it reaches internal networks over a tunnel.

Control 1, Stated. Customers write guardrails in prose in the test policy, and continuous tests have a pause control. A page on which actions need a person's approval, listing what Hackian may reach, would reach level 2.

Openness 1, Disclosed. Ethiack publishes benchmark results for Hackian under its EthiBench protocol. A page on the data Hackian uses would reach level 2 and let those results count.

The card is beta and Ethiack has not seen it. It can claim the card and add evidence; corrections are dated.

From public sources only; Ethiack has not seen it. The levels come from [the report](./index.md) and its cards, which are corrected in place. Quote the card by linking to it.

O Hackian da Ethiack no GAMMA-Ray Spectrum: A– · R2 · C1 · O1

O estúdio GAMMA-Ray lê o Hackian da Ethiack a partir das suas páginas públicas: um agente que testa sozinho a superfície de ataque de um cliente, dentro de uma política escrita.

A Ethiack, fundada em Coimbra em 2022, vende uma plataforma de segurança ofensiva cujo agente de IA, o Hackian, mapeia a superfície de ataque de uma organização e procura vulnerabilidades exploráveis. Lemos apenas fontes públicas, capturadas e com hash a 10 de novembro de 2026.

Autonomia: ainda sem evidência. O Hackian executa ele próprio rotinas de exploração e tem clientes nomeados (Universidade do Porto, Jumia, CEGID), mas nenhuma página diz como uma pessoa participa enquanto age. Alcance 2. Com um Beacon, chega às redes internas. Controlo 1. O cliente escreve guardrails na política de teste e pode pausar os testes contínuos.

Abertura 1. A Ethiack publica resultados de benchmark do Hackian com o protocolo EthiBench; uma página sobre os dados que usa levaria ao nível 2. O cartão é beta e a Ethiack ainda não o viu; pode reclamá-lo e acrescentar evidência, e as correções são datadas.