18-Phase Methodology
Every engagement follows a structured 18-phase offensive security assessment built on OWASP Testing Guide v4.2 and PTES. Every finding is scored with CVSS v4.0 and mapped to the compliance frameworks your auditors require.
18-Phase Offensive Methodology
9 Core Deliverables
Pentest Plan
BothScope, methodology, and approach documentation
Executive Summary
C-LevelRisk overview and business impact for stakeholders
Technical Findings Report
DevelopersDetailed findings with PoCs and reproduction steps
Remediation Priority Matrix
BothSeverity × effort with recommended fix order
Remediation Code
DevelopersCopy-paste fixes in your language and framework
Audit Log
BothComplete record of everything tested
Finding Index
BothSummary table of all findings organized by severity
Attestation Letter
ComplianceFormal verification of assessment completion
Pricing Recommendation
ClientPost-fix retainer and follow-up pricing
System Architecture Documentation
Full infrastructure mapping built during reconnaissance and refined throughout the engagement
Gap Analysis
Documents what wasn't tested and why — scoping decisions, out-of-scope items, and recommendations for future assessments
Standards & Compliance
Every finding includes:
CVSS v4.0 score with full vector string
CWE classification
OWASP Top 10 2025 mapping
OWASP API Top 10 2023 mapping (where applicable)
NIST CSF 2.0 category
SOC 2 Trust Services Criteria
Ready to Start?
Start with a free scan to surface the obvious issues in under 60 seconds. Upgrade to Pro for the full 18-phase autonomous pipeline with compliance-mapped findings and remediation code in your stack.