CAI Technology ecosystem
Two products. Zero overlap. One sovereign EU stack.
AuditOPE finds what's exposed passively. ARTEMIS actively probes it. Use them separately, or combined in a unified bilingual report.
PASSIVE AUDIT
AuditOPE
Programmable site audit API
- ✓Passive crawl + 22 deterministic phases (headers, TLS, Lighthouse, axe-core, cookies, schema.org, llms.txt)
- ✓Single-URL deep scan · synthetic lab data · ~2 min
- ✓Bearer-token REST + JSON + SSE stream (CI-ready)
- ✓Use when: pre-deploy audit, GDPR/EAA compliance check, marketing dashboards, agency client delivery
ACTIVE PENTEST
ARTEMIS
Active pentest scanner · scanope.com
- ✓Active DAST probing · controlled exploitation · post-login flows · business-logic flaws
- ✓Multi-URL crawl with auth · scenario-based scanning · longer runtime
- ✓Same EU-sovereign infra (Romania + Germany) · same self-hosted AI cluster
- ✓Use when: pentest engagement, red-team exercise, compliance audit requiring active testing (PCI-DSS, ISO 27001)
BETTER TOGETHER
Unified bilingual report (PDF)
Run both, get one PDF. The artemis-gateway service combines findings from AuditOPE (passive) + ARTEMIS (active) into a single bilingual PDF deliverable. Ideal for B2B Managed Security clients who want one document, not two.
- →One report · two scanners · zero duplication
- →Bilingual RO + EN side-by-side
- →Single PO / single invoice / single vendor relationship
Frequently asked
Why not one product?+
Passive and active scanning are different disciplines with different runtimes, different legal models (active needs explicit pentest authorization), and different operator skill sets. Forcing them into one tool produces a worse version of both.
Can I buy both in one pack?+
Not yet — billing is separate (AuditOPE credits at auditope.com/pricing, ARTEMIS at scanope.com). Cross-product bundle is on roadmap; meanwhile, unified-report delivery is already available on demand.
Same data residency for both?+
Yes. Both run on the same EU self-hosted infrastructure (Romania + Germany), same self-hosted AI cluster, no OpenAI/Anthropic data transit. One sovereignty story, two products.