Penetration Testingfor Businesses
Find and fix security gaps before attackers do. In a penetration test, we attack your systems in a controlled way, just like a real attacker would. We follow proven methods (OWASP WSTG, PTES, OSSTMM). You get proof that holds up in audits for NIS2, ISO 27001, TISAX and cyber insurance. A report with risk ratings, a free retest and a wrap-up workshop are part of the deal.
$ sectepe-pentest --target webapp.example.com
[SCOPE] Web, API, Cloud, Active Directory
[RECON] Web server and software versions identified
[SCAN] Port scan: 22/SSH, 80/HTTP, 443/HTTPS, 3306/database
[VULN] SQL Injection found: /api/users?id=
[VULN] XSS vulnerability: /search?q=
[CRITICAL] Unsecured admin interface: /admin
[REPORT] 3 vulnerabilities documented
[REPORT] Remediation recommendations created
Methodology aligned · regulation ready
- OWASP WSTG
- PTES
- OSSTMM
- BSI IT-Grundschutz
- ISO 27001
- NIS2
- TISAX
- DORA
Why run a penetration test?
Pentests are more than good practice now. Laws ask for them, insurers want them, and they show your customers that they can trust you.
Regulatory obligation
NIS2, DORA, KRITIS, TISAX and ISO 27001 (Control A.8.8) call for regular technical security checks. A pentest gives you the proof.
Cyber insurance
More and more insurers and auditors ask for a recent pentest. It can affect whether you get cover, what you pay and how much is insured.
Real risk reduction
Find the flaws an attacker could use before they do. That includes logic flaws no scanner can catch.
Customer trust
You get an attestation letter and a management summary. Both are hard proof you can share with customers and partners, and in bids.
Our three-phase approach
We start with a broad check for weak spots and end with a mock attack. The phases build on each other. You can book them one by one, and each is shaped to your attack surface.
Vulnerability assessment
Tools scan your systems, networks and apps. Then we check each hit by hand. The weak spots we find are ranked by CVSS.
Targeted penetration test
We attack the key parts of your IT by hand, based on OWASP WSTG and PTES. We look at business logic and logins. And we test whether an attacker can gain more rights.
Red teaming
We play the attacker for several weeks, with a clear goal and based on MITRE ATT&CK. We also trick staff, dig in on your network and move through it. This shows whether your team spots the attack and responds the right way.
Included in every phase
No matter what scope you choose, the follow-up is always the same. We share what we found and help you make lasting fixes.
Detailed report
A management summary and a technical report. Each finding has a CVSS rating and proof of concept. You also get fix advice, sorted by priority.
Knowledge transfer
We hold a workshop with your Dev and Ops teams. We walk through each finding step by step. Then we hand each fix to the right people.
Complimentary retest
Once you have fixed the gaps, we check the findings again. This is part of the fixed price. You also get an attestation letter for audits and insurers.
Types of penetration tests
Our analysts cover the full range of modern attack surfaces. You can book each test on its own or combine them into one in-depth project.
Web applications
The most common flaws (OWASP Top 10), business logic, logins and sessions.
APIs
Interfaces of all common types. We check whether someone can read data that is not theirs or get around the login.
Network & infrastructure
From outside and inside: firewalls, VPN, how well networks are split up and how current your updates are.
Active Directory & internal
Can an attacker steal passwords, spread through your network and end up as admin?
Cloud (AWS · Azure · M365)
Wrong access rights, storage open to the web, Entra ID and rules for access.
Mobile (iOS & Android)
Based on the OWASP MASVS standard: we take the app apart and check how it stores and sends data.
Social engineering & phishing
Targeted campaigns test how aware your staff are, how your processes hold up and how fast you react.
Red team engagement
A full mock attack on all layers, in line with MITRE ATT&CK.
How a penetration test runs
Six clear steps. You always know the scope, the method and the risks. At the end you get fixes that last.
Scoping & kick-off
We agree on goals, scope and ground rules. And on how much we may know up front.
Information gathering
We search public sources and find your systems. Then we map where an attack could start.
Vulnerability analysis
Tools scan for weak spots, and we check the results by hand. Both follow OWASP WSTG and PTES.
Exploitation
We exploit flaws in a controlled way. This shows how big the real risk is.
Reporting & debriefing
You get findings with CVSS ratings and a management summary. Then we hold a joint workshop.
Retest
We check the fixed findings again. You also get an attestation letter.
Pentest vs. vulnerability scan
The two work well together, but one cannot replace the other. A scan gives you breadth. A pentest gives you depth and shows the risk in context.
| Criterion | Vulnerability scan | Penetration test |
|---|---|---|
| Depth | automated, broad | manual, deep |
| Finds unknown gaps & logic flaws | ✗ | ✓ |
| Ranks by real-world exploitability | ✗ | ✓ |
| Share of false alarms | high | very low |
| Effort | minimal, automated | project-based |
| Recommended frequency | weekly / monthly | annually + after each major release |
Best practice is to scan all the time for breadth. Add regular pentests for depth and for risks in the logic.
What you get at the end
Every penetration test ends with a full set of results that holds up in audits. It is made for management, tech teams and outside parties alike.
Management summary
A summary for top management. A chart shows the risks at a glance, plus our advice.
Technical report with CVSS scoring
Each finding has a CVSS v3.1 rating, the assets it affects and the steps to reproduce it.
Proof for each finding
Screenshots and the exact requests we sent. With these, your engineers can repeat each attack and close every gap.
Prioritised remediation plan
Fix advice ranked by effort and impact. It covers quick wins and long-term hardening.
Retest & debriefing workshop
We check the fixed findings again and run a hands-on workshop with your Dev/Ops team. Both are part of the fixed price.
Attestation letter
Proof that holds up in audits. Use it for ISO 27001, NIS2, TISAX, insurers and customer RFPs.
Pentest Report — Q2/2026
Confidential · 48 pages
Pentest as a Service with SecTepe SnapScan
Between two manual pentests, your attack surface changes every day. Our own platform,SecTepe SnapScan, runs real attack chains on its own and without pause. You can start a run at any time. Active exploits need approval in stages, and each step leaves a clear trail of proof. It is self-hosted, with no detour via a US platform. It is a good match for the yearly pentest.
On-demand
Start a pentest run in minutes. Do it before each release or after you change your setup.
Autonomous
Real attack paths mapped to MITRE ATT&CK. They include password theft and moving through the network.
Production-safe
Safe exploits with no DoS risk. It runs on live systems and is GDPR-compliant.
Frequently asked questions
Here are answers to the most common questions about pentests with SecTepe.
How long does a penetration test take?
Will there be downtime or data loss?
Black-Box, Grey-Box or White-Box — which is right?
Who carries out the penetration test?
How much does a penetration test cost?
How often should we test?
What is the difference between a classic pentest and Pentest as a Service?
Do you know your vulnerabilities?
Let us test your systems before an attacker does. Start with a free scoping call. It is non-binding and confidential.
How we work with you
We want to work with you for the long run, not just deliver once. Our way of working has four steps. So you always know what comes next, who does what and what you get.
1. Free initial conversation
We learn where you stand and what you want. In 30 to 45 minutes we check if we are a good fit. We show you options and answer your questions. There is no obligation.
2. Current state review
We check where you stand today: tech, processes and rules. You get a list of strengths and gaps, sorted by urgency. Our offer is based on it.
3. Delivery with a dedicated lead
An experienced lead guides you through the project. You get clear goals, an open plan for time and cost, and a status every week. All results are written down and belong to you.
4. Running and reviewing
After the project we stay with you. We run systems for you, check them at set times and keep track of open tasks. When new threats or new rules come up, we get in touch.