Frequently asked questions

You do not need to be technical to use Pentesty. The report is written for humans, not just developers.

Timing depends on the authorized scope, target complexity and human review. Testing windows and report delivery are agreed with your team.

Yes. You must own the domain or have explicit written permission from the owner to test it. Pentesty requires domain verification before any scan can run.

Reports can contain sensitive technical evidence. Agree access, retention and sharing with your team and consult the Privacy Policy and contractual terms.

Yes. The PDF is designed exactly for that. The Executive Summary section is written in plain language suitable for non-technical stakeholders.

A false positive is a finding that does not correspond to a confirmed vulnerability in the tested context. Human review assesses evidence and helps reduce false positives; no test guarantees that every vulnerability will be found.

Pentesty serves enterprise organizations. Human review is part of the engagement; scope, volume and pricing are agreed in the proposal. A pentester reviews findings, assesses evidence, and puts risk into context. Your team receives guidance to prioritize remediation.

Vulnerability scanning; Web application testing; Phishing campaign; Internal penetration testing; External penetration testing. Pentesty combines security testing, automated assessment, and expert review. Scope is agreed with your team and tests run only against authorized assets.

Pentesty serves enterprise organizations. Human review is part of the engagement; scope, volume and pricing are agreed in the proposal.