Base44 apps can get a live pentest from Tenzai
By Steven Van ·
Builder workspaces and above can connect Tenzai once, then run one attack test at a time against a published app. Billing stays on the Tenzai plan.
Published apps on Base44 can now get a third-party penetration test from Tenzai. Base44 posted about it on October 27, 2026. The blog post that explains the test is dated October 5, 2026.
Tenzai attacks the published, running app, on top of Base44's code scan. A workspace admin or owner connects it once from Connectors with a Tenzai access key, stored encrypted and not shown again. A published app with an up-to-date code scan then has a Run penetration test button on its Security page. One test runs at a time. Fullstack apps are not supported. The Builder plan and above includes it.
Tenzai signs in with a scoped test login from an invitation, and Base44 says it never receives your own login. The report goes to the Tenzai account. Billing is on your Tenzai plan's pentest rate, not Base44 credits, and the blog does not publish that rate.