Services · Core service
Penetration Testing (VAPT)
Web, API, external and cloud penetration testing, with a retest after fixes.
- State
- Launching
- Pricing
- Priced at launch
Fit
Who it is for, and when
Who it is for
Teams that need their web applications, APIs or external attack surface tested.
When to use it
- A customer or partner asks for a penetration test report
- A major release or new API is going live
- You want to know what an attacker could reach from outside
Services · what our people do
What we do
Scoped, authorised testing with written rules of engagement, followed by a retest once fixes are in.
Scope
- Web applications
- APIs
- External attack surface
- Cloud-related testing where applicable
Working together
What we need, and what you receive
What we need from you
- Written authorisation for the test
- The applications, APIs or external addresses in scope
- A contact who can be reached while testing runs
What you receive
- Findings with reproduction steps and severity
- Remediation guidance
- A retest of fixed findings
Boundaries
What this service does not include
- Testing stays inside the written scope and rules of engagement you approve. Nothing outside them is tested.
- ARIA does not test applications.
ARIA
ARIA and this service
ARIA is being developed to support repeatable cloud-control remediation and verification within this workflow. It does not replace the engineering work.
ARIA does not test applications. Cloud-configuration findings from a test can be tracked and verified in ARIA.
ARIA
Cloud control remediation and verification
- Status
- LaunchingIn development
ARIA is being developed as Tricognita's cloud control remediation and verification product. Its final capabilities will be introduced as they are validated and launched.
Evaluate → Fix → Verify → Keep secure → Evidence
Coverage
Clouds and pricing
Clouds
This service is not tied to a single cloud. Scope is agreed per engagement.
Pricing
Priced at launch
Every engagement is scoped and priced in writing before work starts.
How pricing worksTalk to us about Penetration Testing (VAPT).
Tell us about your environment and what you need. You receive a written scope before any work starts.