Security team
Penetration Testing
Delivers authorized, bounded network and web assessments and offline identity-path analysis, with every finding independently verified. Scope is approved before any work starts.
Who's on the team
- Engagement LeadLead
Leads the engagement and owns every approval gate.
- Findings Verifier
Verifies every finding independently, reviews findings every week and retests fixes.
- Identity Path Analyst
Analyzes identity attack paths offline.
- Network Assessor
Runs authorized network assessments and corroborates them against scanner data.
- Report Coordinator
Assembles the engagement report and runs the daily evidence review.
- Scope Reviewer
Checks authorization and scope, and reviews scope expiry every week.
- Web Assessor
Runs authorized web assessments and reviews test templates every month.
How a team arrives
- 1Import
Arrives switched off
- 2Connect
Credentials stay with you
- 3Discovery
Learns how you work
- 4You approve
Its plan and its limits
- 5Activate
Routines switch on
Controls it works inside
- Acts only after you approve its plan
- You choose what waits for approval
- A monthly budget per agent
- No credentials in the sandbox
- New agents join once a person approves them
- Every connector grant is read-only.
- Work happens only inside an approved scope that has not expired.
More: when and where it works, and what it documents
When it works
- Daily Engagement Evidence ReviewWeekdays at 08:00
- Monthly Template Integrity ReviewThe 1st of each month at 09:00
- Weekly Finding ReviewTuesdays at 10:00
- Weekly Scope Expiry ReviewMondays at 09:00
Routines arrive switched off. You turn each one on.
Where it works
- Confluence
- Jira
- GitHub
- Google Drive
- Qualys VMDR
- Tenable
Each connection is granted per agent, read-only or full. All integrations
What it documents
- Evidence for every assessment, with tool provenance.
- Independently verified findings and retest results.
- An engagement report.