# Penetration Testing

URL: https://avispa.ai/agent-teams/penetration-testing/

Security team

Delivers authorized, bounded network and web assessments and offline identity-path analysis, with every finding independently verified. Scope is approved before any work starts.

## Who's on the team

- **Engagement Lead** · Lead · Leads the engagement and owns every approval gate.
- **Findings Verifier** · Verifies every finding independently, reviews findings every week and retests fixes.
- **Identity Path Analyst** · Analyzes identity attack paths offline.
- **Network Assessor** · Runs authorized network assessments and corroborates them against scanner data.
- **Report Coordinator** · Assembles the engagement report and runs the daily evidence review.
- **Scope Reviewer** · Checks authorization and scope, and reviews scope expiry every week.
- **Web Assessor** · Runs authorized web assessments and reviews test templates every month.

## How a team arrives

1. 1 · **Import** · Arrives switched off
2. 2 · **Connect** · Credentials stay with you
3. 3 · **Discovery** · Learns how you work
4. 4 · **You approve** · Its plan and its limits
5. 5 · **Activate** · Routines switch on

## Controls it works inside

- Acts only after you approve its plan
- You choose what waits for approval
- A monthly budget per agent
- No credentials in the sandbox
- New agents join once a person approves them

- Every connector grant is read-only.
- Work happens only inside an approved scope that has not expired.

**More: when and where it works, and what it documents**

## When it works

- **Daily Engagement Evidence Review** · Weekdays at 08:00
- **Monthly Template Integrity Review** · The 1st of each month at 09:00
- **Weekly Finding Review** · Tuesdays at 10:00
- **Weekly Scope Expiry Review** · Mondays at 09:00

Routines arrive switched off. You turn each one on.

## Where it works

- Confluence
- Jira
- GitHub
- Google Drive
- Qualys VMDR
- Tenable

Each connection is granted per agent, read-only or full. [All integrations](https://avispa.ai/integrations/)

## What it documents

- Evidence for every assessment, with tool provenance.
- Independently verified findings and retest results.
- An engagement report.

[All agent teams](https://avispa.ai/agent-teams/) · [Next: Personal Assistant](https://avispa.ai/agent-teams/personal-assistant/)

## Onboard Penetration Testing with us.

[Book a demo](https://avispa.ai/book-a-demo/) · [Watch it work](https://avispa.ai/#watch)