Web and network assessments
Choose testing appropriate for a running application or network target.
Dynamic application testing
Register an authorized URL or Application asset, select Dynamic app test (DAST), and run the assessment. Review evidence for security headers, exposed files, input handling and other supported checks. These checks are not a substitute for a complete manual penetration test.
External and internal scope
Domain and IP assets support external assessments. Internal discovery and endpoint observations use Guardian agents and site collectors. Scope internal network work carefully and obtain authorization for the hosts and ranges being tested.
Cloud assessments
Configure cloud integrations for supported posture collection. Do not interpret an empty cloud report as a completed cloud penetration test. Validate which accounts, resources and checks actually contributed evidence.