Question 1

What's included in every scan?

Accepted Answer

Every scan includes passive OSINT recon, active surface mapping, deep vulnerability testing across OWASP Top 10 categories, independent finding verification, and a full CVSS 4.0 scored report.

Question 2

How long does a scan take?

Accepted Answer

A typical single-target scan completes in 30–90 minutes. All scans run entirely server-side — you can close your browser and return when the report is ready.

Question 3

Do you need access to source code?

Accepted Answer

No. Pentevo operates as a black-box or grey-box tester against your live application. Source code access is never required.

Question 4

Is it safe to run on production?

Accepted Answer

Yes. Pentevo's agents never delete data, modify database records, or send emails from your system. All probes are read-only or safely isolated.

Question 5

What compliance reports are included?

Accepted Answer

Pro and Enterprise plans auto-generate compliance mapping for PCI-DSS v4, SOC 2 Type II, ISO 27001, GDPR Article 32, HIPAA §164.312, and NIST CSF 2.0.

Pricing is on the way

Pricing is on the way