Request a pentest. It just starts.
Request a pentest from SECSQUAD and skip the scoping marathons — testing gets underway right away. Watch human-verified findings land in real time, drive every issue through to resolved, and pull branded reports on demand. Your whole security picture in one portal — ready for your AI agents, too.
- Findings in real time
- Instant Critical alerts
- Reports on demand
- Built for AI agents
Live score across active engagements.
- SQL Injection in Login EndpointCRITICAL
- Cross-Site Scripting (XSS) in SearchHIGH
- Outdated TLS Version SupportedMEDIUM
Penetration testing by SECSQUAD, delivered through one client portal.
- Run by an experienced offensive-security team
- Mapped to OWASP, PTES & CIS methodologies
- Your engagements and data stay yours
Speed
Request an engagement and testing starts — no drawn-out scoping or paperwork.
Transparency
See findings as they're discovered instead of waiting for a final document.
Control
Track remediation, request retests, and manage your whole team in one place.
Assurance
Testing mapped to OWASP, PTES and CIS, with every finding reported clearly and reproducibly.
How it works
From request to resolved, without the waiting
A straightforward path that keeps you informed at every step — not in the dark until a PDF lands.
- 1
Request
Pick the testing you need and request it in the portal. No lengthy scoping calls or paperwork.
- 2
Test
Testing gets underway and findings appear in real time — with instant alerts on Critical and High issues.
- 3
Track
Follow remediation, ask your consultant questions, and request retests as your team fixes things.
- 4
Resolve
Download polished reports on demand and watch closure rates climb across every engagement.
Services
One portal, every kind of penetration test
SecScope is the client portal for SECSQUAD's security testing — request the engagement your business needs and manage it all in the same place. Web and mobile application testing are live in the portal today, with broader coverage rolling out.
Available now
Web ApplicationPenetration Testing
Deep testing of your web apps and authentication for the flaws attackers exploit — injection, broken access control, and business-logic abuse.
Mobile ApplicationPenetration Testing
iOS and Android assessments covering the app, its local data storage, and the APIs and services behind it.
API SecurityPenetration Testing
Testing for REST, GraphQL, and SOAP APIs — broken authorization, injection, and exposure of sensitive data and logic.
Network & InfrastructurePenetration Testing
Internal and external testing of your infrastructure — servers, routers, and hardware — surfacing exposed services, misconfigurations, and weak paths.
Expanding coverage
Cloud SecurityPenetration Testing
Assessments of your AWS, Azure, and GCP environments — misconfigurations, excessive permissions, and exposed assets.
Active DirectoryPenetration Testing
Identity and AD testing that maps the routes from a foothold to lateral movement and domain-wide compromise.
Desktop ApplicationPenetration Testing
Thick-client and desktop software testing — local privilege, data handling, and the backend calls behind the app.
Red TeamingPenetration Testing
Goal-driven, multi-vector adversary simulation that tests detection and response, not just individual controls.
Discover more servicesSECSQUAD
Explore the full range of SECSQUAD security services at secsquad.io.
Included with every engagement
- Technical report
- Executive summary
- Remediation guide
- Free retesting
Platform capabilities
Everything your team needs to manage findings, end to end
From the moment you request a test to the day you close the last finding, SecScope keeps your whole team informed and in control.
Findings & vulnerability management
Global findings inventory — Search and filter every finding across all your engagements from one place.
Saved views & CSV export — Persist your favourite filter sets and export findings with one click.
Rich finding detail — Impact, evidence, CVSS, references and proof-of-concept chains on every issue.
Status & target dates — Overdue items highlighted, with the full history of every status change tracked.
Collaborate & drive to closed
Consultant Q&A — Per-finding threads with @mentions and watch — ask the tester who found it.
Ticket linkage — Attach a Jira or ServiceNow ticket and assignee to any finding.
Retest requests — Confirm a fix and track the retest outcome without leaving the portal.
Formal risk acceptance — Justify, approve, expire and audit residual risk — rendered into the report.
Reports on demand
Report Center — Branded PDF reports and Excel trackers, downloadable whenever you need them.
Password-protected — Sensitive deliverables protected with a one-time reveal per user.
File integrity — Every deliverable carries a SHA-256 hash and size so you can verify it.
Secure document uploads — Share builds, credentials and files with the testing team, securely.
Assets & scope
Asset inventory — Environment- and risk-grouped assets, with findings mapped to each one.
Risk overview — A colour-coded grid of risk by environment and severity, at a glance.
Manage assets — Create, edit and retire assets, kept tied to the scope of your testing.
Global search — One search across findings, engagements, reports and contracts.
Per-asset reports — Export a branded report for any asset — its findings and remediation status in one file.
Request testing & manage your contract
Request basket — Submit multiple applications for testing against your contract at once.
Live quota — Itemised or pooled — your remaining balance is shown before you submit.
Usage history — See what's configured, reserved, confirmed and consumed across your contract.
Usage reports — Export branded PDF and Excel usage reports for your own records.
Integrations & notifications
Ticketing integrations — Push findings to Jira, ServiceNow and custom webhooks in your stack.
Per-engagement routing — Custom severity mapping with signed delivery and a full activity log.
Notification center — An in-app inbox plus email, with per-event preferences you control.
Instant Critical & High alerts — Be notified the moment a serious issue is found — in-app and by email.
Your account & plan
Your plan at a glance — See your current plan, seat usage and exactly which capabilities are included.
Try it, in full — Start on a full-featured trial with an at-a-glance countdown — nothing is held back.
Your branding — Upload your organisation's logo so it appears across your portal and on every report.
Team & roles you control — Invite your team, assign least-privilege roles and manage access yourself.
Integrations & notifications
Findings flow into the tools you already use
Push findings straight into your team's existing workflows so remediation follows the path you already follow — with per-engagement routing, custom severity mapping and a notification center you control.
Jira
Turn findings into tracked issues in your team's existing boards and workflows.
ServiceNow
Route findings into your service-management process so remediation follows your usual path.
Custom webhooks
Send findings to any system in your stack with per-engagement routing and severity mapping.
Microsoft Teams
Send findings and Critical alerts straight into your team's Teams channels.
Azure DevOps
Create work items from findings and keep engineering moving without re-keying anything.
Tool names and logos denote compatibility only — not partnerships or endorsements.
AI & automation
Human-verified findings, ready for your AI agents
Every finding is reviewed by a person — never dumped from a scanner. Then, on Enterprise, connect your own tools and AI agents to that same data through a hosted MCP server and tenant-scoped API, so automation works from verified truth.
Hosted MCP server
Point any MCP-capable agent — Claude or your own — at SecScope and let it work with your security data.
Tenant-scoped API tokens
Issue role-pinned, revocable tokens so agents only ever see your organisation's data.
Query everything you can see
Read your findings, posture, reports, assets, usage and search — the same data your team sees, isolated to your tenant.
Read-only by default
Agents start read-only. Any ability to act is opt-in, scoped, and audited — you stay in control.
Available on Enterprise — consent-gated and isolated to your tenant.
One dashboard · cross-engagement · real-time
Your whole security posture, at a glance
A single view of remediation across every engagement — open, fixed and closed by severity — so you always know where you stand without chasing anyone.
A needs-attention shortlist
The findings waiting on your team, surfaced first — with deep links straight to what to do next.
Activity feed & active engagements
See what changed and what's running across every engagement, without chasing anyone for a status update.
Remediation Planner
A what-if simulator: resolve all your High findings and see exactly how your posture would improve before you commit.
- Critical3
- High9
- Medium22
- Low14
Illustrative preview
Secure by design
Built for the whole team, governed by role
From the boardroom to the engineering floor, everyone gets exactly the access that fits their role — in one shared portal, with least-privilege by default.
| Capability | Viewer Read-only | Member Day-to-day | Executive Oversight | Admin Full control |
|---|---|---|---|---|
| View findings, reports & dashboard · download deliverables | ||||
| Filter, save views & export findings (CSV) | ||||
| Comment · update finding status · request retests | ||||
| Link Jira / ServiceNow tickets · manage assets in scope | ||||
| View contracts & usage | ||||
| Create engagement requests | ||||
| Accept / reject residual risk | ||||
| Manage team · integrations · AI consent |
Invite your whole team, secured with mandatory two-factor authentication and domain-restricted invites — everyone sees exactly what they need, and nothing they shouldn't.
Built-in assurance
Rigour you can show, not just claim
Every engagement follows established methodologies and is delivered with the data protection, evidence and accountability your audits and stakeholders expect.
Your data stays yours
Tenant-isolated by design — your engagements, findings and reports are never co-mingled with another customer's.
Regional data residency
Deploy across multiple geographies to meet in-country data-sovereignty and privacy requirements.
Audit-ready evidence
Every status change, comment and decision is logged — ready to support SOC 2, ISO and PCI reviews.
Defensible risk ownership
Formal risk acceptance with approval and expiry, rendered straight into the report for your auditors.
Recognised methodologies
Testing mapped to OWASP, PTES and CIS, so you can show auditors and stakeholders exactly what was covered.
Why SECSQUAD
A portal is only as good as the testing behind it
SecScope makes the experience effortless — but what you're really buying is rigorous, human-led penetration testing you can trust.
Manual, expert-led testing
Real testers probe your systems the way an attacker would — going far beyond what an automated scan can find.
Every finding verified by a human
We confirm and reproduce what we report, so you get real, actionable issues — not a raw scanner dump full of false positives.
Retests included
Once you've fixed an issue, request a retest and we confirm it's actually resolved — closure you can prove.
Confidential by default
Your engagements, findings, and reports stay confidential — access is limited to your team and the consultants on your test.
Tester certifications
Accreditations
Want to see what you'll receive? Ask us for a sample report and vulnerability tracker.
Request a sample reportPackages
One portal, three ways to run it
From reading your results to running a programme across the whole organisation. Plans are set up with the SecScope team and tailored to your scope — there's no self-service checkout.
Core
See and act on your results.
Included with your engagement
Up to 5 portal users
- Findings inventory with full vulnerability detail, evidence & CVSS
- Branded PDF reports and the Excel vulnerability tracker
- Update remediation status, comment with the testers & request retests
- Saved views and CSV export of your findings
- Mandatory 2FA and role-based access for your team
Professional
Run your security programme from the portal.
Contact sales for pricing
Up to 25 portal users
- Everything in Core, for up to 25 users
- Self-service engagement & retest requests
- Advanced dashboards, trends and the Remediation Planner
- Risk-acceptance workflow and a tested-asset inventory
- Jira & ServiceNow connectors, webhooks and a document workspace
- Contract usage & quota reporting
- Team management with an admin audit log
Enterprise
Scale it across the whole org, your way.
Contact sales for pricing
Unlimited seats
- Everything in Professional, with unlimited seats
- API access plus an MCP server for your own tools & AI agents
- Custom ticketing and workflow integrations
- Built for org-wide, programmatic and automated use
- The highest assurance and integration flexibility
FAQ
Frequently asked questions
What is SecScope?
SecScope is the client portal for SECSQUAD penetration testing. It's where you request engagements, follow findings in real time, talk to your testers, track remediation, and download your reports — all in one place.
How do I start a penetration test?
Request an engagement directly in the portal and testing gets underway — no lengthy scoping calls or paperwork to slow you down. You choose the type of test you need and we take it from there.
What types of testing can I request?
Web and mobile application testing are available in the portal today. Coverage is expanding to API, network and infrastructure, cloud, Active Directory, desktop applications, and full red-team engagements — talk to us about what you need.
Do I have to wait for the final report to see results?
No. Findings appear as testing progresses, and you're alerted the moment a Critical or High-severity issue is discovered — so your team can start fixing the most serious problems right away.
Can my whole team use it?
Yes. Invite your colleagues with the right level of access, and give everyone the view that fits them — concise executive summaries for leadership and full technical detail for engineers. Every account is protected with mandatory two-factor authentication, and invites are restricted to your organisation's domain.
Does it work with our existing tools?
Findings can flow straight into the tools your team already uses — including Jira, ServiceNow, and Azure DevOps — and we can build custom integrations on request.
Can I connect my own AI agents?
Yes — on Enterprise. SecScope exposes a hosted MCP server and tenant-scoped API tokens, so you can point your own tools or AI agents (for example, Claude) at your security data and query findings, posture, reports, assets and usage. Access is read-only by default, isolated to your tenant, and any write access is opt-in.
How long does a test take?
It depends on the scope, and we agree a timeline with you up front. Either way you're not waiting until the end — findings appear in the portal as testing progresses, with instant alerts on the most serious issues.
Who carries out the testing?
Experienced offensive-security professionals from the SECSQUAD team. Findings are reviewed and verified by a person — not dumped straight from an automated scanner.
Is our data kept confidential?
Yes. Your engagements, findings, and reports are treated as confidential, and access is limited to your team and the consultants working with you.
Can SecScope support our compliance and audit needs?
Deliverables are structured to support common compliance and audit requirements, and testing is mapped to recognised methodologies (OWASP, PTES, CIS) so you can show exactly what was covered.
What happens after the test?
You keep full access in the portal: download reports, track remediation, request retests as you fix issues, ask your consultant questions, and formally accept any residual risk — all in one place.
Ready to see SecScope in action?
Request a demo and we'll show you how your team can request testing, follow findings live, and resolve issues faster — all from one portal.
Request a demo
See your security testing in one place
Tell us a little about your needs and we'll show you how SecScope works for your team. Already a client? Log in to your portal.