# Cobalt

**Canonical:** https://apis.io/providers/cobalt-io/  
**Website:** https://www.cobalt.io  
**APIs profiled:** 0

Cobalt provides an AI‑powered offensive security platform that delivers continuous penetration testing as a service. Their solution combines human‑led expertise with automated testing, integrating with development workflows to identify and remediate vulnerabilities across web applications, APIs, mobile apps, and cloud environments. Cobalt’s platform offers flexible credit‑based pricing, real‑time reporting, and integrations that help organizations embed security into the software development lifecycle.

## Kin Score — 24.7 / 100 (emerging)

Scored 2026-10-31 under rubric 0.25.0.

| Facet | Score |
|---|---|
| Discoverability | 51.8 |
| Contract Quality | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 0.0 |
| Developer Ergonomics | 42.9 |
| Access Clarity | 47.4 |

Regulatory layer — **Horizontal (data, software, accessibility, platform)**: 24.5 (matched via fallback).

## Agent readiness — 5.4 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | bearer |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | yes |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |
| Pagination Ratio | na |
| Operation Distinctiveness | na |

## Security (3)

- **Cobalt Io Authentication** — 2 schemes
- **Cobalt Io Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC
- **Cobalt Io Trust Center** — SOC 2, ISO 27001, PCI DSS, HIPAA

## Tags

Company, Security, PenetrationTesting, OffensiveSecurity, SaaS, Platform

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/cobalt-io/). Scores are computed from the provider's own public artifacts under a published rubric.