What is a penetration test?

A point-in-time, authorized attempt to exploit your systems like an attacker — with evidence, impact and fixes.

Scan vs assessment vs pentest

Scan: automated crawler lists possible CVEs. Cheap, noisy, rarely accepted by auditors. Assessment: scan + triage + prioritized list. Better, still mostly unproven. Manual pentest (what we do): senior tester chains auth, logic and injection flaws into real impact, with requests and screenshots per finding, plus retest.

What a good report contains

Executive summary (business risk)
Scope + method (OWASP / NIST / PTES)
Findings by exploitability with PoC
Remediation roadmap + retest letter

How long + how much

Web/API: 5–10 business days. Secatix: Scout from $499, Strike from $699 fixed — see pricing.