Audit and pentest / Offensive security

Test your systems before an attacker does

Have experts test your applications and infrastructure. We investigate exploitable weaknesses within the authorised scope and explain how to address them.

Request a proposal

Scope, deliverables and price agreed before work starts.

When should you involve us?

Check an application or API before a production launch.
Assess attack paths in your internal network or Active Directory.
Have code or a cloud configuration reviewed after a significant change.

Services / Offensive security

The scope of the engagement

Web, mobile and API security: We agree the workflows, roles and access to test. Checks cover technical vulnerabilities and business rules within the agreed scope.
External and internal infrastructure, Active Directory: Testing examines entry points, privileges and opportunities to move through systems. Sensitive actions and excluded environments are identified during scoping.
Code and cloud configuration: Reviews examine the material you provide: application logic, secrets, permissions and service configuration. They can complement a pentest or form a separate engagement.

Choosing your approach

SpectrAI or an expert-led pentest?

Compare the tests supported by SpectrAI with the scope of an engagement with a pentester.

SpectrAI / Product

Automated application pentesting

SpectrAI tests your web applications and APIs within an authorised scope. Choose it to run assessments on your schedule and replay evidence after fixes. Each published finding is verified automatically and comes with the request and the response that demonstrate it, then the report is published automatically.

Explore SpectrAI

rootzero / Service

An engagement with our experts

A pentest is scoped with you around an objective and a schedule. It can cover web, APIs, mobile, internal networks or Active Directory, with a handover and remediation priorities.

Explore pentesting services

Prepare for our conversation

The applications, domains or environments concerned.
Available test accounts, roles and access.
The schedule, production constraints and authorisation to test.

What we agree upfront

Scope, testing rules, deliverables and retest arrangements are agreed before the engagement. A pentest assesses a defined scope at a point in time; it cannot guarantee the absence of every vulnerability.

Engagement stages

01
Scope
Objectives, boundaries, access, responsibilities and schedule.
02
Work
Activities within the scope and rules agreed together.
03
Explain
Results, limitations and actions to discuss with your team.

Tell us about your context.

Share your needs, the systems or teams involved and your deadlines. We will get back to you to define the engagement.

Request a proposal