Penetration Testingfor Businesses
Find and fix security gaps before attackers do. We test in a set way that follows OWASP WSTG, PTES and OSSTMM. You get proof that holds up in audits for NIS2, ISO 27001, TISAX and cyber insurance. A report with CVSS ratings, a free retest and a wrap-up workshop are part of the deal.
$ sectepe-pentest --target webapp.example.com
[SCOPE] Web, API, Cloud, Active Directory
[RECON] Fingerprinting: Apache/2.4.54, PHP/8.1
[SCAN] Port scan: 22/SSH, 80/HTTP, 443/HTTPS, 3306/MySQL
[VULN] SQL Injection found: /api/users?id=
[VULN] XSS vulnerability: /search?q=
[CRITICAL] Unsecured admin interface: /admin
[REPORT] 3 vulnerabilities documented
[REPORT] Remediation recommendations created
Methodology aligned · regulation ready
- OWASP WSTG
- PTES
- OSSTMM
- BSI IT-Grundschutz
- ISO 27001
- NIS2
- TISAX
- DORA
Why run a penetration test?
Pentests are more than good practice now. Laws ask for them, insurers want them, and they show your customers that they can trust you.
Regulatory obligation
NIS2, DORA, KRITIS, TISAX and ISO 27001 A.12.6 call for regular technical security checks. A pentest gives you the proof.
Cyber insurance
More and more insurers and auditors ask for a recent pentest. It can affect whether you get cover, what you pay and how much is insured.
Real risk reduction
Find the flaws an attacker could use before they do. That includes logic flaws no scanner can catch.
Customer trust
You get an attestation letter and a management summary. Both are hard proof you can share with customers and partners, and in bids.
Our three-phase approach
We start with a broad check for weak spots and end with a mock attack. The phases build on each other. You can book them one by one, and each is shaped to your attack surface.
Vulnerability assessment
Tools scan your systems, networks and apps. Then we check each hit by hand. The weak spots we find are ranked by CVSS.
Targeted penetration test
We attack the key parts of your IT by hand, based on OWASP WSTG and PTES. We look at business logic, logins and privilege escalation.
Red teaming
We play the attacker for several weeks, with a clear goal and based on MITRE ATT&CK. This includes social engineering, persistence and lateral movement. It puts your detection & response to a hard test.
Included in every phase
No matter what scope you choose, the follow-up is always the same. We share what we found and help you make lasting fixes.
Detailed report
A management summary and a technical report. Each finding has a CVSS rating and proof of concept. You also get fix advice, sorted by priority.
Knowledge transfer
We hold a workshop with your Dev and Ops teams. We walk through each finding step by step. Then we hand each fix to the right people.
Complimentary retest
Once you have fixed the gaps, we check the findings again. This is part of the fixed price. You also get an attestation letter for audits and insurers.
Types of penetration tests
Our analysts cover the full range of modern attack surfaces. You can book each test on its own or combine them into one in-depth project.
Web applications
OWASP Top 10, business logic, authentication, session handling.
APIs
REST, GraphQL, gRPC — BOLA/IDOR, broken auth, mass assignment.
Network & infrastructure
External & internal, firewalls, VPN, segmentation, patch level.
Active Directory & internal
Kerberoasting, ADCS, lateral movement, Tier-0 escalation.
Cloud (AWS · Azure · M365)
IAM misconfigurations, storage exposure, Entra ID, conditional access.
Mobile (iOS & Android)
OWASP MASVS, binary analysis, secure storage, transport security.
Social engineering & phishing
Targeted campaigns test how aware your staff are, how your processes hold up and how fast you react.
Red team engagement
A full mock attack on all layers, in line with MITRE ATT&CK.
How a penetration test runs
Six clear steps. You always know the scope, the method and the risks. At the end you get fixes that last.
Scoping & kick-off
We agree on goals, scope and Rules of Engagement. We also pick a black, grey or white-box setup.
Information gathering
We use OSINT and fingerprinting to find your assets. Then we map the attack surface.
Vulnerability analysis
Tools scan for weak spots, and we check the results by hand. Both follow OWASP WSTG and PTES.
Exploitation
We exploit flaws in a controlled way. This shows how big the real risk is.
Reporting & debriefing
You get findings with CVSS ratings and a management summary. Then we hold a joint workshop.
Retest
We check the fixed findings again. You also get an attestation letter.
Pentest vs. vulnerability scan
The two work well together, but one cannot replace the other. A scan gives you breadth. A pentest gives you depth and shows the risk in context.
| Criterion | Vulnerability scan | Penetration test |
|---|---|---|
| Depth | automated, broad | manual, deep |
| Detects zero-days & logic flaws | ✗ | ✓ |
| Prioritisation by exploitability | ✗ | ✓ |
| False-positive rate | high | very low |
| Effort | minimal, automated | project-based |
| Recommended frequency | weekly / monthly | annually + after each major release |
Best practice is to scan all the time for breadth. Add regular pentests for depth and for risks in the logic.
What you get at the end
Every penetration test ends with a full set of results that holds up in audits. It is made for management, tech teams and outside parties alike.
Management summary
A summary for top management. It has a risk heat map and strategic advice.
Technical report with CVSS scoring
Each finding has a CVSS v3.1 rating, the assets it affects and the steps to reproduce it.
Proof-of-concept evidence
Screenshots, requests and payloads. With these, your engineers can repeat each attack and close every gap.
Prioritised remediation plan
Fix advice ranked by effort and impact. It covers quick wins and long-term hardening.
Retest & debriefing workshop
We check the fixed findings again and run a hands-on workshop with your Dev/Ops team. Both are part of the fixed price.
Attestation letter
Proof that holds up in audits. Use it for ISO 27001, NIS2, TISAX, insurers and customer RFPs.
Pentest Report — Q2/2026
Confidential · 48 pages
Pentest as a Service with SecTepe SnapScan
Between two manual pentests, your attack surface changes every day. Our own platform,SecTepe SnapScan, runs real attack chains on its own and without pause. You can start a run at any time. Active exploits need approval in stages, and each step leaves a clear trail of proof. It is self-hosted, with no detour via a US platform. It is a good match for the yearly pentest.
On-demand
Start a pentest run in minutes. Do it before each release or after you change your setup.
Autonomous
Real attack chains mapped to MITRE ATT&CK. They include credential theft and lateral movement.
Production-safe
Safe exploits with no DoS risk. It runs on live systems and is GDPR-compliant.
Frequently asked questions
Here are answers to the most common questions about pentests with SecTepe.
How long does a penetration test take?
Will there be downtime or data loss?
Black-Box, Grey-Box or White-Box — which is right?
Who carries out the penetration test?
How much does a penetration test cost?
How often should we test?
What is the difference between a classic pentest and Pentest as a Service?
Do you know your vulnerabilities?
Let us test your systems before an attacker does. Start with a free scoping call. It is non-binding and confidential.
How we work with you
We see every project as a long-term partnership, not a one-off delivery. Our approach has four clear phases. So you always know what happens next, who is in charge of what and which results to expect.
1. Free initial conversation
We learn about your starting point, your goals and your constraints. In 30 to 45 minutes we check whether our offer fits your situation. We outline possible paths and answer your questions, with no obligation.
2. Structured assessment
We record the current state: technical, organizational and regulatory. You get a prioritized assessment that names strengths, gaps and areas for action. It is the basis for a reliable offer.
3. Delivery with a dedicated lead
An experienced lead guides you through the delivery. You get clear milestones, transparent planning of effort and cost, and a weekly status. All results are documented and belong to you.
4. Continuous operations & review
After the project, we stay with you in operations. This includes managed services, regular reviews and tracking of open actions. We also reach out when new threats, new rules or technology changes come up.