Replay QA Security Scan

Replay QA is an agentic QA platform that has expanded into automated web application penetration testing aimed at vulnerabilities introduced by AI coding agents. Based solely on the security landing page, the product uses authenticated browser sessions to explore a running app, inject real attack traffic, capture deterministic runtime recordings, and deliver root-cause reports to GitHub, Linear, Jira, or webhooks. It positions itself between static analysis and occasional manual pentests by claiming to verify exploitability in the live app while providing reproduction evidence. No public revenue, growth, pricing, team size, or customer count was available, so market traction is unknown. The core wedge is acute: AI-generated apps are shipping faster than human security review, with repeated IDOR, broken access control, and injection patterns. The main risks are an established DAST/pen test market, buyer trust, false positives, and the legal need to ensure scans only hit owned systems.