Authorized external security assurance

Know your public
web presence.

Pentscope combines AI-assisted analysis with an authorization-first process, helping teams understand and improve the security of the public web applications they control.

Authorized, non-destructive external checks. You stay in control.

ASSURANCE STATUS CURRENT
Public apps in scopeVerified first
Evidence packetFix-focused
Assessment activityAuthorized only
BUILT FOR THE MOMENT A BUYER ASKS:“How do you know?”

More than a scan.
A living answer.

Most tools hand you a list of alerts. Pentscope is designed to give you an understandable security story: what is in scope, what we observed, what needs attention, and what has been retested.

01

Buyer-ready proof

A clean, exportable security packet that makes diligence conversations easier.

02

Fix-first guidance

Plain-language context for leaders, precise remediation guidance for builders.

03

Verified progress

Retest the fix, document the outcome, and keep the evidence current.

Abstract illustration of connected public-web evidence and a verified assurance marker.
THE PENTSCOPE ASSURANCE MODELDiscovery, verification, evidence, and remediation—kept in one clear line of sight.

From consultation to security proof.

Simple by design. Automated where it is safe. Clear about the moments that require your approval.

  1. 01

    Set the scope together

    We confirm the public web applications you control and the assurance path that fits your business.

  2. 02

    Verify domain control

    You add a DNS TXT record. It proves control of the public web property before anything runs.

  3. 03

    Record authorization

    You accept a specific standard profile before Pentscope performs any approved external check.

  4. 04

    Use the evidence

    Review findings, remediation guidance, retests, and a buyer-ready security packet in one calm workflow.

Authorization is not
a checkbox.

CLIENT CONTROL

Prove ownership first

Every standard engagement begins with domain-control verification and a recorded authorization tied to the exact public web application.

SAFE BY DESIGN

Clear, bounded checks

The standard profile is limited to safe passive discovery and safe HTTP checks. It excludes exploit attempts, authenticated testing, internal-network work, credentials, and nonstandard testing.

HUMAN ACCOUNTABILITY

AI-assisted, not unsupervised

AI helps organize evidence and remediation guidance. It does not bypass your authorization, expand scope, or make a live assessment decision on its own.

Stay current with
Assurance 10.

One-time testing gives you a moment in time. Pentscope Assurance gives you a living, buyer-ready answer as your public web presence changes.

Start with a baseline if you need one. Make Assurance your operating rhythm when you need proof that stays current.

ASSURANCE 10FLAGSHIP
$199/ month

Founder launch access for up to 10 verified public web applications.

  • ✓Living asset map and verification status
  • ✓Ongoing safe reassessments and change awareness
  • ✓Monthly buyer-ready security packet
  • ✓Fix-first guidance and verified retests
  • ✓Exportable evidence for buyers and auditors
Discuss Assurance 10 → Final scope and launch availability are confirmed through consultation. No online payment is collected here.
BASELINE SNAPSHOTONE TIME
From $699one-time

A bounded starting point when you need an initial security story—not an ongoing assurance relationship.

  • ✓Verified public-app inventory and initial safe review
  • ✓Buyer-ready snapshot report and remediation guidance
  • ✓One verified retest window

$199 conversion credit when you move to Assurance 10 within 30 days.

Discuss a baseline → Deep, authenticated, or higher-risk testing is always separately scoped and approved.

Start with a
clear conversation.

Tell us about the public web applications you need to understand. We will confirm fit, scope, and the authorization path before an assessment is considered.

Submit a consultation request and our team will follow up. This does not create a workspace, collect payment, authorize, or start an assessment.

Customer portal access
is protected.

Private portal access is provisioned individually after the appropriate authorization and onboarding steps. This public site does not expose a customer workspace or activate sign-in.

How consultation
data is handled.

What we collect. The consultation form collects only what you enter: your name, work email, company, one public website or domain, an approximate application count, your request, your timing preference, and your consent to be contacted.

Why we collect it. Solely to review your consultation request and follow up with you about Pentscope services. Submitting the form does not create an account, customer record, workspace, payment, authorization, or security assessment.

Where it goes. Your request is delivered to Pentscope's consultation mailbox through an internal notification service. This site sets no analytics or advertising cookies and does not sell or share your information for marketing by others.

Retention and your choices. We keep consultation requests only as long as needed to respond and evaluate fit. To ask what we hold about you, or to request correction or deletion, reply to any follow-up you receive from the Pentscope team and we will action it.