ScnFix Pentest

About

A team assignedto the engagement

ScnFix Pentest is a team-led web and API testing service. Testers are assigned to an authorised project. This page does not publish names, photographs, or certifications.

Our Testing Team

These are the responsibilities on an engagement. They describe the work, not a published staff list. A role is filled for the project that needs it.

Engagement and testing lead

Owns the written scope, the rules of engagement, and the schedule on the quotation.

Web application security testing

Tests the authorised web application, including authenticated flows when test accounts are provided.

API security testing

Tests the API named in the scope, including role checks across the accounts you provide.

Finding validation and report review

Checks evidence before a finding is released, and reviews the report before you receive it.

There is no public researcher signup and no bidding. ScnFix invites the people who will work on that project after the rules of engagement are approved. You can follow the work in writing. A call is not required.

Ready to request a test?

Share the application and the reason. We reply in writing. No call is required.