Frequently asked questions

Do I need to know how to code to use Pentesty?: We discuss your systems, objectives, and testing boundaries. You authorize the assets to be assessed.
How long does a scan take?: Timing depends on the authorized scope, target complexity and human review. Testing windows and report delivery are agreed with your team.
Do I need my own domain?: Yes. You must own the domain or have explicit written permission from the owner to test it. Pentesty requires domain verification before any scan can run.
Is my data safe?: Reports can contain sensitive technical evidence. Agree access, retention and sharing with your team and consult the Privacy Policy and contractual terms.
Can I share the report with clients or investors?: Yes. The PDF is designed exactly for that. The Executive Summary section is written in plain language suitable for non-technical stakeholders.
What is a false positive?: A false positive is a finding that does not correspond to a confirmed vulnerability in the tested context. Human review assesses evidence and helps reduce false positives; no test guarantees that every vulnerability will be found.
Human review?: Pentesty serves enterprise organizations. Human review is part of the engagement; scope, volume and pricing are agreed in the proposal. A pentester reviews findings, assesses evidence, and puts risk into context. Your team receives guidance to prioritize remediation.
What vulnerabilities does Pentesty detect?: Vulnerability scanning; Web application testing; Phishing campaign; Internal penetration testing; External penetration testing. Pentesty combines security testing, automated assessment, and expert review. Scope is agreed with your team and tests run only against authorized assets.
Can I run more than one analysis?: Pentesty serves enterprise organizations. Human review is part of the engagement; scope, volume and pricing are agreed in the proposal.

Frequently asked questions

Do I need to know how to code to use Pentesty?: We discuss your systems, objectives, and testing boundaries. You authorize the assets to be assessed.
How long does a scan take?: Timing depends on the authorized scope, target complexity and human review. Testing windows and report delivery are agreed with your team.
Do I need my own domain?: Yes. You must own the domain or have explicit written permission from the owner to test it. Pentesty requires domain verification before any scan can run.
Is my data safe?: Reports can contain sensitive technical evidence. Agree access, retention and sharing with your team and consult the Privacy Policy and contractual terms.
Can I share the report with clients or investors?: Yes. The PDF is designed exactly for that. The Executive Summary section is written in plain language suitable for non-technical stakeholders.
What is a false positive?: A false positive is a finding that does not correspond to a confirmed vulnerability in the tested context. Human review assesses evidence and helps reduce false positives; no test guarantees that every vulnerability will be found.
Human review?: Pentesty serves enterprise organizations. Human review is part of the engagement; scope, volume and pricing are agreed in the proposal. A pentester reviews findings, assesses evidence, and puts risk into context. Your team receives guidance to prioritize remediation.
What vulnerabilities does Pentesty detect?: Vulnerability scanning; Web application testing; Phishing campaign; Internal penetration testing; External penetration testing. Pentesty combines security testing, automated assessment, and expert review. Scope is agreed with your team and tests run only against authorized assets.
Can I run more than one analysis?: Pentesty serves enterprise organizations. Human review is part of the engagement; scope, volume and pricing are agreed in the proposal.