Integration with the tools the team already uses.

Imports scan results straight into the pentest as findings, with no copy and paste.

Each organization's open vulnerabilities, through the API and filtered by the tag of its assets. Also .nessus exports from Nessus, Tenable.io and Security Center.

Each organization's open vulnerabilities, through the API (VMDR) and filtered by the tag of its assets. Also XML reports from VM and web application scanning.

XML reports with the findings of every host, port and service.

XML reports, exported by hand or through its API.

Issues exported as XML, with their confidence level.

XML alert reports, with their risk level.

XML reports with CVSS and false positives already marked in the scanner.

JSON exports that keep the triage done in the scanner.

Open ports and services, registered as the pentest's assets.

Results from any code analysis tool that exports SARIF, with file and line. For secret scanners, where the secret is gets stored, never its value.

Package vulnerabilities with their fixed version, failing configurations and secrets found in images, repositories and clusters.

Failing controls, by account and resource, with the standards each one covers (CIS, ISO 27001, ENS…).

The domain's risk rules, with their severity from the points they take away.

Every finding opens its ticket, and the finding hears back when the ticket is closed.

Two-way sync between findings and the work items on your team's board.

Two-way sync between findings and the incidents in your corporate service tool.

Takes each pentest's status to the CRM: sales sees progress without entering the platform.

Every work request received or updated, with structured data, sent to the system that already manages the customer relationship.

Alerts on serious findings, reports, work requests and retests, in the team's channel or in one per organization.

The same alerts in Slack: one channel for the team and, optionally, one per organization that only gets its own.

Imports the findings your autonomous pentesting operations generate. The platform never launches or controls the tests: it only centralises the result.