Expert testing. Two products. One platform.
Use PTaaS to manage penetration-testing engagements and ASM to review external assets and exposure changes. Human experts define the scope, assess risk and guide the next step.
Penetration Testing as a Service
Manage scoped penetration testing, QA-reviewed findings, reports, remediation and retests in TrekShield’s platform.
Security, AppSec and engineering teams managing recurring testing needs.
Attack Surface Management
Build an inventory of authorized external assets, review exposure changes and prioritize investigation with TrekShield’s ASM product.
Security teams responsible for external assets and exposure changes.
People make the decisions. The platform keeps the record.
| Human experts | Platform |
|---|---|
| Agree scope, safety and objectives | Record scope and engagement state |
| Conduct manual and business-logic testing | Organize findings and evidence |
| Judge severity and perform QA | Support reports and controlled publication |
| Advise on fixes and evaluate retests | Track owners, status, SLAs, requests and results |
| Review ASM signals and decide on investigation | Configured discovery, inventory and change review |
Documented controls — and their limits.
- Role- and attribute-based access and separate client workspaces
- API keys and signed webhooks (webhook configuration is API-only)
- Evidence hashes and audit logging supporting the engagement workflow
- TLS in transit; deployment-dependent controls confirmed for your environment
SSO and SCIM are not currently available. MFA enrollment and password-reset workflows are API-only in the documented product. Agencies and service providers can read about the partner program. See the Trust Center and product documentation for current limitations.
Discuss the engagement and the platform.
A short scoping call, no obligation.