Services

We test your company’s defences the way an attacker would

Manual penetration testing by engineers with personal certifications (CEH, CISSP, CISA, CISM), and a continuous scanning platform, in the same portal.

OWASP, PTES, OSSTMMEvidence-backed reportRetest after remediation
Request a quote →How we work
What we test

Six perimeters, the same rigour

Choose one or combine them: the quote starts from what needs testing.

Web applications and APIs

OWASP Top 10, authentication, sessions, access between roles, business logic, REST and GraphQL APIs.

Infrastructure and network

The exposed perimeter, the internal network, Active Directory, servers, Wi-Fi and VPN.

Cloud

AWS, Azure and Google Cloud: IAM, publicly exposed resources, networking, logging, Infrastructure as Code.

Mobile applications

iOS and Android: local storage, secrets in code, communication, code protection and the backend APIs.

Phishing simulation

Standard, branded or spear phishing campaigns, with results per department and training afterwards.

Social engineering

Phishing, vishing (phone), pretexting and, on request, physical access — the human factor, tested within agreed limits.

Two ways of working

Manual pentest or continuous scanning?

They are not exclusive: scanning keeps watch between two pentests, the pentest finds what scanning cannot see.

Manual pentest

A project with a scope, a schedule and a signed authorization. Engineers who think like an attacker, executive and technical reports, a retest after remediation. Quoted per project.

The scanning platform

Automated, scheduled scans of your assets, with findings tracked in the portal until closed and exported to your team’s tools. The plans are on the pricing page.

Platform plansPentest or vulnerability scan?
Methodology

How the project unfolds

Following OWASP, PTES and OSSTMM — and after a signed testing authorization, before any test.

  1. Scope and quote

    You tell us what is in scope; you receive a quote with the scope, duration and schedule within one business day.

  2. Testing authorization

    You sign the authorization in the portal: the targets, the testing window and the rules. No test starts without it.

  3. Reconnaissance and testing

    We map the scope, then test manually, with automated tools only as support. You follow the testing status in the portal.

  4. Report and walkthrough

    You receive the executive and technical reports; serious findings are flagged to you immediately, not at the end.

  5. Remediation and retest

    Once you fix them, you request the retest from the portal: we verify each finding and close it with evidence.

Further reading

Guides

How to prepare for a pentestWhat a pentest costsOWASP Top 10 guideMoldova cybersecurity law guideISO 27001 and SOC 2 guidePCI DSS v4.0.1 guideDORA and TLPT guideNIS2 and GDPR guide
FAQ

What clients ask us

How long does a pentest take?
It depends on the scope: usually 3–5 days of testing for a web application, 5–10 days for an infrastructure and 7–14 days for complex projects. We fix the exact duration in the quote.
What is the difference between a pentest and the scanning platform?
Automated scanning quickly finds known issues and tracks them over time; a manual pentest finds what no scanner sees — logic flaws, access between roles, chains of vulnerabilities — and proves them. Most companies use both together.
Do you work with small companies?
Yes: with start-ups, SMEs and corporations. The quote starts from your scope, so a small project stays small.
Is there any risk to our systems?
We work with maximum caution: tests are scheduled with you, after a signed testing authorization, and any action that could affect operations is agreed in advance or performed on a test environment.
What do we receive at the end?
An executive report for management and a technical one for the team: every finding with its severity (critical, high, medium, low), the evidence and the remediation steps. You also track the findings in the portal, where you request the retest once they are fixed.

Not sure yet what you need?

Tell us what you want to protect; we propose the right scope within one business day.

Request a quote →Write to us