Use the TrekShield platform.
Everything your security and engineering teams need to run engagements, manage findings through remediation and retest, and connect the tools you already use.
-
Getting started
Accept your invitation, sign in with a password and optional authenticator code, and find your way around the TrekShield dashboard in your first session.
-
Engagement lifecycle
How a TrekShield engagement moves through nine states from scoping to completion, who advances each step, and what you can see at each stage.
-
Findings, severity and CVSS
How TrekShield describes a finding: lifecycle states, severity bands, CVSS v3.1 vector and score, CWE, proof of concept and the 0-100 risk score.
-
Remediations and retests
Assign fixes, move a remediation from open to verified, request retests of fixed findings, and understand how retest results update your findings.
Concepts
-
Engagement lifecycle
How a TrekShield engagement moves through nine states from scoping to completion, who advances each step, and what you can see at each stage.
-
Findings, severity and CVSS
How TrekShield describes a finding: lifecycle states, severity bands, CVSS v3.1 vector and score, CWE, proof of concept and the 0-100 risk score.
-
SLA and remediation
How TrekShield tracks remediation deadlines by severity, what pauses the clock, which alerts you receive, and how a fix moves from open to verified.
Guides
-
Working with engagements
Review scope, rules of engagement and test credentials, approve scope as a Client Administrator, share documents, and follow an engagement tab by tab.
-
Findings and evidence
Read findings, download proof-of-exploit evidence, discuss with testers, export lists, and request risk acceptance with the right justification.
-
Remediations and retests
Assign fixes, move a remediation from open to verified, request retests of fixed findings, and understand how retest results update your findings.
-
Reports and branding
Find and download published PDF reports, understand report types and the QA steps behind them, and see how compliance mapping and branding work.
-
Attack surface monitoring
How TrekShield attack surface monitoring works, from public-source observation to authorized assessment and analyst-validated exposures.
Integrations
-
Integrations overview
What TrekShield connects to today: webhooks, Slack, Jira and ServiceNow, who can configure them, what data they receive, and what is not available yet.
-
Webhooks
Receive signed JSON events from TrekShield at your HTTPS endpoint, verify the HMAC-SHA256 signature, and understand event names, delivery and history.
Administration
-
Team and roles
The seven TrekShield roles and what each can do, and how Client Administrators invite colleagues, change roles and keep access to what people need.
-
Security settings and audit log
How TrekShield protects sign-in with passwords, lockout and authenticator codes, what the security settings page offers, and what the audit log records.
Reference
-
API keys
Create, use and revoke personal API keys for the TrekShield API: the secret is shown once, a key inherits your permissions, and expiry is optional.
-
FAQ and troubleshooting
Quick answers for sign-in problems, missing findings or reports, invitations, retests, risk acceptance, webhook delivery and API errors in TrekShield.
See the platform on a live call.
A short scoping call, no obligation.