CATEYE VAPT

Vulnerability assessment and penetration testing by our testers, with a live portal where you follow findings as they are found, request retests and download the report.

Request a demo See what’s included

Testing you can follow

From an agreed, authorised scope to a report your developers and auditors can use.

Scope and authorisation

Targets, rules of engagement and a signed authorisation agreed first. Testing cannot start without it.

Testing by our team

Web applications, APIs, mobile apps, networks and cloud environments tested by our penetration testers.

Live findings

Findings appear in your portal as they are confirmed, with evidence and a CVSS score, so you can start fixing early.

Retests

Ask for a retest when a fix is ready and see the result on the same finding.

Reports

An executive summary and a technical report with steps to reproduce and fix each issue.

Links to compliance

Findings can feed your risk register in CATEYE GRC, and the report serves as audit evidence.

Run by us, or by your team

Managed by CATEYE

Our security team runs the service for you and reports to you, so you get the outcome without hiring for it.

Or used by your team

Your own IT or security staff sign in to the same workspace, with roles that decide who sees and changes what.

Hosted and kept apart

We host and update the platform. Each client has its own workspace, kept apart from every other client’s data.

How it works

From a first conversation to a service running for your company.

  1. Request a demo

    Tell us about your company and what you need. We show you the service with sample data.

  2. Agree the scope

    We agree what is covered, the systems involved and who does what, in writing.

  3. Set up your workspace

    We create your workspace, invite your people and connect the systems in scope.

  4. Work and report

    The service runs, findings and progress are tracked in the platform, and you get regular reports.

Questions about CATEYE VAPT

What can you test?

Web applications, APIs, mobile apps, internal and external networks and cloud environments. We agree the exact targets in the scope.

Will testing break anything?

We test only what you authorise, at agreed times, and avoid destructive actions unless you ask for them in writing.

How long does a test take?

It depends on the scope. A typical web application test takes one to two weeks, and you see findings as they come in.

Do you retest after we fix things?

Yes. Request a retest in the portal and the result is recorded against each finding.

How does this differ from your VA/PT consulting?

It is the same testing team. CATEYE VAPT adds the portal, live findings and retests. See also VA/PT services.

Plan a test with CATEYE VAPT

We will show you the portal with a sample engagement, findings and report.

Request a demo All cybersecurity services

Need an on-demand CIO, a security audit or a digital roadmap?

Tell us about your business and we will get back to you.

Contact us