Pentest
The Pentest module records each penetration test as an engagement, from scope to findings to an approved report, and tracks its findings to a fix.
Who it is for
- Teams that run penetration tests or other scoped assessments, for their own organisation or for clients.
- Security leads who want test findings remediated alongside the rest of their exposure, not left in a document.
What you get
| Capability | Where in the app | Guide |
|---|---|---|
| Engagements with a type, an approach, a testing window and a scope linked to your assets | Pentest › Engagements | Engagements |
| A shared library of vulnerability write-ups to report a finding from | Templates › Vulnerabilities | Vulnerability library |
| Findings written by hand or imported from a tool's report | Exposure › Findings | Add or import findings |
| Findings attached to an engagement, in the order the report prints them | Pentest › Engagements | Engagements |
| An assessment report, reviewed, approved and exported | Assurance › Reports | Reports |
| Access for a client or an outside tester | Share Project, in the project switcher | Users and access |
From setup to result
Pentest is not a step in the setup wizard: open Pentest › Engagements in your project to start.
- Start an engagement and set its scopePentest › Engagements
- Report findingsTemplates › Vulnerabilities · Exposure › Findings
- Attach and order findingsPentest › Engagements
- Generate, approve and export the reportAssurance › Reports
Good to know
Where are findings remediated?
In Exposure › Findings, alongside findings from scans and connected services.
Can the AI assistant help?
AI Sidekick › Pentester starts engagements, records findings and generates the report when asked; see AI Sidekick.
Plans
Paid plans include report generation; see pricing.
Did this answer your question?
Cloud posture (CSPM)
The Cloud posture (CSPM) module shows pass and fail configuration results for the cloud and identity services you connect, such as Microsoft 365, mapped to framework controls, and tracks a fix or an exception for each failing check to a decision.
Get started
A checklist of your first steps in CISO360AI: create an account, choose your modules, set up your organisation and verify your domain, then a plan for your first week.