Resources

Practical security buying guides.

Guides for teams using penetration testing to support compliance, product assurance and security decision-making.

ISO 27001

ISO 27001 pentest evidence

How penetration testing supports ISO 27001 evidence, risk treatment and audit readiness, with practical guidance for SaaS and technology teams.

Read page →SOC 2

SOC 2 pentest requirements

Practical SOC 2 penetration testing guidance for SaaS teams that need security evidence, remediation tracking and audit-ready reporting.

Read page →Checklist

API pentest checklist

A practical API penetration testing checklist covering REST, GraphQL, authentication, object authorisation, rate limits and data exposure.

Read page →Buying guide

Subscription vs one-off pentest

Compare penetration testing subscriptions and one-off pentests for SaaS, compliance and fast-changing product teams.

Read page →