P
Penetration Testing
Manual exploitation, not scanner-only
External & internal network, web application (OWASP Top 10 / ASVS), API, mobile, wireless, cloud, and social engineering. Scoping → reconnaissance → manual exploitation → privilege escalation → lateral movement → post-exploitation → reporting → free retest within 90 days.
Plans
Every engagement is scoped to your environment. Request a quote. We respond with a tailored plan.
Monthly plan
Continuous testing retainer
Once-off plan
One engagement
Standards & methods
OWASP Top 10OWASP ASVS v4CVSS v3.1NIST SP 800-115
What is included
External & internal network testing
Web & mobile application testing (OWASP Top 10)
API & cloud infrastructure assessments
Social engineering (email, physical, vishing)
Manual exploitation. Not scanner-only
Executive summary + technical findings with CVSS v3.1
Prioritised remediation roadmap
Free retest within 90 days
Related reading
Field notes from the team building Enternovate. Written in the open.