You define the scope
Choose the authorised targets, test accounts, coverage, exclusions and traffic settings for the assessment.
Our approach
PenetraTech carries out offensive security testing within the scope you authorise. People set the direction, approve sensitive actions and decide what happens next.
Human-led. AI-driven.
Human-led describes how the product works. Your team defines the assessment and its boundaries; our offensive AI executes within them. Consent is part of that workflow.
Choose the authorised targets, test accounts, coverage, exclusions and traffic settings for the assessment.
PenetraTech runs the assessment, captures observations and connects findings to their evidence.
Sensitive actions require consent. The people leading the assessment review what the evidence supports and retain the final security judgment.
The assessment lifecycle
Scope & consent
Select the testing module and define the environment. Configure test accounts, relevant journeys, coverage and limits. Confirm authorisation before the run.
AI testing
See the assessment progress and its observed activity. Keep the scope in view and use the available execution controls as the work develops.
Evidence & review
Review observations against their supporting evidence before accepting a finding. Use APE to understand the affected asset, impact and remediation context.
Reports & action
Generate a report with the sections and executive summary your audience needs. Plan remediation and focused testing to check that a fix addresses the finding.
One platform. Two ways to run it.
With a self-service licence, your security team operates the platform and reviews the findings. In managed pentesting, our specialists lead that work with you. Both use the same offensive security technology.
Find your way to workLet’s move forward
Explore how scope, AI execution, consent and evidence come together in PenetraTech.