Built for Teams That Want AI Security Without the AI Overhead
Mid-sized organizations
Get the latest AI testing without a dedicated AI team.
Regulated and sensitive environments
Keep test data inside your perimeter. No AI-provider data agreements to negotiate.
Restricted and segmented networks
Test where cloud tools can’t reach.
Public sector and developing markets
Bring AI-powered defense to organizations that have been left behind by cost and complexity.
Everything You Need. One Box. Nothing Leaves.
RidgeOne brings three things together in a single, self-contained appliance. It runs autonomous security testing inside your environment, end to end.
RidgeGen
Our agentic AI platform for continuous security validation. It plans, tests, chains attack paths and reports.
An open-weight AI model
Delivered with the appliance and run locally. Ships with Gemma 4 (12B); NVIDIA Nemotron 3 and GPT-OSS models install with a single command.
NVIDIA DGX Spark
A compact AI system that holds the model and the platform together.
Why RidgeOne
From Box to First Test, Fast
Deploy
Bring RidgeOne online in your environment. No model downloads or GPU setup.
Define
Set your scope and how far testing can go.
Test
RidgeOne runs autonomously and delivers an evidence-backed report.
Share RidgeOne with your team
AI Pentesting With Guardrails
AI pentesting only works if you trust it. RidgeOne enforces your limits outside the AI model, so nothing runs that you didn’t allow.
Your scope
You decide which systems are in bounds.
Your posture
You choose how aggressive each test can be.
Your secrets
Credentials stay out of the AI’s reach.
Your record
A full audit trail of every action, kept locally.
Re-tests run from the recorded assessment, so results stay consistent and reproducible.
Getting RidgeOne
Get the hardware
RidgeOne runs on NVIDIA DGX Spark, available from NVIDIA and its authorized partners.
Get your RidgeGen license
RidgeGen is the software that runs the tests. The AI model is included.
Talk to your Ridge Security sales rep
Your rep will confirm your license and credits, help size your deployment, and scope a proof of value in your environment.
Frequently Asked Questions
What is RidgeOne?
It’s a self-contained device that runs RidgeGen, AI penetration testing, and its AI model locally. RidgeOne puts both in one box, inside your environment.
What can RidgeOne test?
IT infrastructure, networks, web applications, APIs, Active Directory, hosts and IoT/OT environments.
How are RidgeOne findings reported?
Every finding includes evidence, the attack path and fix guidance, mapped to OWASP Top 10 and MITRE ATT&CK.
Is RidgeOne an on-premises AI penetration testing solution?
Credentials are held in a protected SafeBox and used in memory only for the duration of a test — they are never persisted in RidgeGen and never passed to any third-party system, including model vendors. Anything written to disk is encrypted, and stored evidence is limited to high-level structure or metadata rather than actual credential values or database contents.
Do I need AI expertise to run it?
No. RidgeOne ships ready to use. There’s no AI infrastructure to build or maintain.
Does any data leave the appliance during a test?
No. The AI model runs locally, so testing needs no connection to Ridge Security or any AI provider.
Is AI pentesting safe for production environments?
With RidgeOne, policy sets the limits, not the AI. You define the scope and posture, and every action is logged.
Are there ongoing AI token costs?
No token costs. Your investment is the hardware and the RidgeGen license.
Proof is good,
a fast fix is better