Expert penetration testing. Built around your security program.
Human-led testing across applications, cloud, infrastructure and specialist environments, with TrekShield PTaaS to manage engagements and ASM to monitor external exposure.
For security and engineering teams managing releases, external exposure and customer security reviews.
Services
Expert testing across applications, APIs, mobile, cloud, infrastructure, red teaming and specialist environments.
Explore servicesPTaaS
Manage scoped penetration testing, QA-reviewed findings, reports, remediation and retests in TrekShield’s platform.
Explore PTaaSASM
Build an inventory of authorized external assets, review exposure changes and prioritize investigation with TrekShield’s ASM product.
Explore ASMExpert testing, with the scope and evidence in view.
Testing for your environment
Relevant application, infrastructure, cloud, red-team or specialist scope — agreed with you before work starts.
Explore security services →A platform for the engagement
Agreed scope, released findings, reports, remediation and retest requests in one workspace.
Explore the platform →Terms you can examine
PTaaS list prices, scoped agreements and documented product behavior — inspect the method before you commit.
See pricing and evidence →Security testing across your environment.
Explore application, infrastructure, cloud, red-team and specialist testing scopes.
Application & API
Web, mobile, and API testing that finds what scanners miss.
Cloud & Container
Misconfigurations, identity, and escape paths across cloud and containers.
Network & Infrastructure
The path an attacker takes from perimeter to domain dominance.
AI & LLM
Security testing for LLM features, agents, and AI risk.
Hardware, IoT & OT
Device, firmware, and industrial-control security.
Adversary Emulation
Goal-based red-team operations, collaborative purple-team exercises, social engineering and physical access testing that test detection and response across people, process and technology.
All services
The full testing catalogue — every scope and specialization.
Two products. One workspace.
Human experts make the calls — the platform holds the scope, findings, remediation and retests for the engagement.
PTaaS
Manage scoped penetration testing, QA-reviewed findings, reports, remediation and retests in TrekShield’s platform.
Explore PTaaSASM
Build an inventory of authorized external assets, review exposure changes and prioritize investigation with TrekShield’s ASM product.
Explore ASMHuman experts
- Agree scope, safety and objectives
- Conduct manual and business-logic testing
- Judge severity and perform QA
- Advise on fixes and evaluate retests
- Review ASM signals and decide on investigation
Platform
- Record scope and engagement state
- Organize findings and evidence
- Support reports and controlled publication
- Track owners, status, SLAs, requests and results
- Configured discovery, inventory and change review
Start with the scope. Build the right program.
Published PTaaS annual list prices — no per-seat platform fees.
Published annual list prices. Your quote confirms scope, testing cadence, tester effort, and included retest terms.
Essential
One primary asset
- ✓Human-led penetration testing
- ✓Technical and executive reporting
- ✓Platform access for findings and remediation
Professional
Testing scoped for up to three assets
- ✓Human-led penetration testing
- ✓Technical and executive reporting
- ✓Platform access for findings and remediation
Enterprise
Custom testing scope
- ✓Human-led penetration testing
- ✓Technical and executive reporting
- ✓Platform access for findings and remediation
Retests are requested and tracked in the platform. The included number, eligibility window, and any billable additional cycles are stated in the engagement agreement.
Engagement contacts and communication arrangements are confirmed during scoping. A dedicated lead or standing team is included only where the plan or quote states it.
Questions buyers ask us first.
When do we see findings?
Findings are released to the client after QA when the engagement is delivered. From delivery, remediation status, SLA tracking, retest requests and results, and published reports are managed in the platform.
Do you retest fixes?
Retests are requested and tracked in the platform. The included number, eligibility window, and any billable additional cycles are stated in the engagement agreement.
Do I need a subscription?
No. Start with a scoped engagement when that fits the work. Discuss an annual program when you have recurring testing needs.
How do PTaaS and ASM differ?
PTaaS manages scoped penetration-testing engagements — findings, reports, remediation and retests. ASM builds an inventory of authorized external assets and surfaces exposure changes for review.
What can you test?
Web apps, APIs, mobile, cloud and Kubernetes, internal and external networks, and AI/LLM systems — scoped to your environment.
Preparing for a customer review or audit?
Discuss the scope, report and supporting evidence your reviewer needs — see our Trust Center for the procurement and security review path.
Let’s define the right scope.
Discuss what needs testing, the evidence you need and the engagement terms.