Asset and scope register
Maintain the relationship between customers, authorised assets, service scope, environments and relevant product activity.
Technical overview · Pentesys Portal
One working environment for evidence, ownership and verified closure.
A technical view of the Pentesys Portal information model, product workflows, access assumptions, reporting, integration boundaries and operational use.
System flow
From authorised input to usable evidence.
This sequence shows how the principal technical activities connect. It is a capability flow, not a promise that every engagement uses every stage.
- 01
Authorise scope
Associate the customer, service and permitted technical boundary with the working record.
- 02
Connect evidence
Relate assets, engagements, observations and supporting evidence to the relevant product workflow.
- 03
Publish confirmed work
Release validated findings and actions through the agreed customer workflow.
- 04
Own remediation
Retain status, ownership, discussion, guidance and exceptions against the original issue.
- 05
Verify closure
Attach retesti or rescan evidence and preserve the assurance history for reporting.
Module specifications
What the technical capability covers.
The modules below retain the operational detail a technical evaluator needs when deciding whether the service fits their environment.
Finding workspace
Present confirmed findings with affected scope, evidence, severity, context, remediation guidance and current status.
Evidence record
Keep supporting technical evidence and reporting context connected to the observation or engagement that produced it.
Ownership workflow
Associate actions, responsible parties, progress, decisions and accepted exceptions with the security issue.
Retest and rescan history
Relate validation activity and closure evidence to the original finding or exposure rather than creating a disconnected result.
Reporting and export
Provide the agreed technical, remediation and stakeholder views while preserving source context and status.
Coverage, logic and outputs
The specification behind the workflow.
These details make the coverage and operating assumptions easier to evaluate. Items identified in the verification notice remain subject to sign-off before launch.
Information model
- Customer, service, engagement and authorised scope
- Assets and externally observed exposure
- Findings, evidence, severity and remediation guidance
- Owners, actions, status and accepted exceptions
- Retest, rescan and verified-closure history
Access and operation
- Customer and Pentesys responsibilities defined for the operating model
- User roles and administrative permissions confirmed before onboarding
- Sensitive evidence handled according to the agreed service controls
- Notification and escalation behaviour aligned to the engagement
- No discovery or testing enabled without authority and scope
Integration and reporting
- Define the destination system and approved data fields
- Confirm direction, permissions, authentication and ownership
- Preserve links between exported work and source evidence
- Define retry, failure and reconciliation behaviour
- Confirm technical, executive, PDF, structured-data and APIi options before commitment
Boundaries and assumptions
Confirm the detail before work begins.
Technical coverage is shaped by the agreed scope, customer environment, service selection and authorised operating model.
See prices →- The Portal supports Pentesys services; it is not positioned as a separate fifth product.
- No discovery or testing begins until authority and scope are agreed.
- Available roles, integrations, exports, retention and security controls must be confirmed for the selected service and deployment before commitment.
Review the scope
Apply the technical model to your environment.
A relevant Pentesys specialist will review this overview, answer questions about boundaries, evidence and workflow, and explain the smallest proportionate next step.
Review this scope with a specialist Please do not submit credentials, secrets or sensitive evidence through the enquiry form.
Technical language, translated
Need a definition before going deeper?
The Pentesys glossary explains the security, testing and assurance terms used throughout this overview in plain English.
Browse the glossary →Trusted experience
Supporting recognised organisations.
Pentesys has continuously performed admirably during our collaboration, giving us faith in their knowledge. They delivered work that above our expectations by approaching each project with a deep understanding of our specifications. Their team demonstrated a remarkable degree of proficiency by effectively pinpointing weaknesses and offering practical suggestions to reduce possible hazards.
Unlike previous pentests that produced generic outputs, this engagement gave us clear, prioritised actions with real-world attack scenarios. The platform visibility into assets, vulnerabilities and remediation progress has helped us mature our security posture significantly. The team were professional, responsive, and genuinely cared about improving our security rather than just ticking a box.
The red team and external attack surface management work highlighted blind spots we didn't know existed. What stood out was the strategic guidance alongside the technical delivery – helping us shape a longer-term security roadmap rather than a one-off engagement. This felt like a partnership, not just a transactional assessment.
Pentesys has continuously produced excellent work. Their group demonstrated extraordinary technical proficiency by spotting crucial flaws and offering clever fixes that greatly strengthened our security stance. Their meticulous approach and attention to detail ensured that every facet of the project was covered in full.
We engaged Pentesys and the team for a complex penetration test and adversary simulation. The quality of the technical findings, realism of the attack paths, and clarity of reporting were outstanding. The recommendations were practical and mapped clearly to business risk, which made board-level conversations much easier. We've since built Pentesys into our ongoing security assurance programme.
ACCREDITED TO THE HIGHEST INDUSTRY STANDARDS
CREST member company
Pentesys has met CREST requirements for penetration testing in EMEA, demonstrating independently assessed technical and operational security-testing standards.
Cyber Essentials certified
Pentesys is Cyber Essentials certified across the whole organisation, showing that essential controls are in place to protect against common cyber threats.
CREST AI Charter signatory
A visible commitment to responsible, transparent and trustworthy use of AI within cyber security services.