PenTest Project PenTest Project
See pricing Book a demo
Enterprise edition

Penetration test delivery, automated end to end

From the client's first request to the signed-off retest, with the controls your auditors ask about. In our cloud or on your own servers.

Book a 30-minute demoSee Enterprise pricing
Automation

The work moves on by itself. People decide.

Flint and Slate hand the engagement to each other, the paperwork is written from the record, and every step that matters waits for a named person.

Request to report, and backA client asks for a test in Slate and scopes it in Flint; the agreed engagement fills the Slate project before it is saved. Issuing the report marks it delivered in Flint, and later changes in Flint show in Slate to apply or dismiss.
Scope, sign and invoice in one placeThe statement of work is drafted from the answers; your package prices and day rate fill the lines. The client signs online, and the invoice is raised from the accepted statement of work.
Gates instead of chasingSeven stations from brief to delivery. A readiness line names what is missing; nothing is issued before review, approval and inspection, and drafts carry a watermark until then.
Letters and conclusions written for youThe attestation letter is generated and signed on delivery. A retest's conclusion is written from the findings' state, and a yearly test becomes a series showing what was added, dropped and fixed.
A findings library that growsWrite a finding once and reuse it everywhere, scored with CVSS 4.0, with CWE refreshed monthly. Nessus results import from CSV straight into the engagement.
Assistants that ask firstAI Wingman in Flint looks things up and takes an action only after you confirm. AI Assist in Slate drafts write-ups with your own AI provider. Striker AI, coming soon, will add AI-assisted and agentic testing against a locked scope.
Control

The answers your auditors and your security team expect.

Who can see what, who did what, and how the platform itself is protected.

Single sign-on and rolesSingle sign-on with Microsoft Entra ID, Google Workspace or any OpenID Connect provider, for your team and your clients' users, in every edition. In Slate, five roles, thirteen permissions and custom roles from a form; anything outside a person's scope is invisible to them.
Four logs, twelve monthsIn Slate, activity, document access, email delivery and system faults: who did what and when, filtered and exported. Flint keeps its own activity log per Partner. The activity log in each product is available as an add-on.
Security you can showTwo-step sign-in with an authenticator app, account lockout, bot protection on public forms, a typed confirmation before any deletion and a check of who is at the keyboard before sensitive changes, encrypted secrets, and a test suite that checks every endpoint for authorisation gaps.
Your brand everywhereYour domain, logos, signatory, colours and fonts on every report, letter, email and on the client portal.
Regions and subsidiaries kept apartEach Partner works in its own space in Flint, with its own logins, clients and logo. Reaching into its data needs a time-limited access grant from it first. One Partner is included; more are available as an add-on.
Clients never countThe client portal is free and unlimited for every client user, however large the client's own team is.
Where it runs

Our cloud or your servers. The same products.

Recommended

Cloud version (we host)

  • A dedicated instance, shared with no other customer
  • In the region you choose: EU by default, or US, Canada, Australia and others on request
  • Run, backed up, monitored and updated by us
Enterprise only

Server version (you host)

  • One Linux host with Docker, inside your network
  • Activated and updated without internet access
  • Signed releases, hardened containers, no call home
Self-hosted and air-gapped in detail
Commercial

What comes with Enterprise.

Users
From 10 per product. Flint and Slate are licensed separately, each with its own count
Support
A named contact and phone support, with a quarterly product review
Development
Three development days a year included, and twelve months' exclusivity on features you fund
Price
Fixed for the first two years, then at most 5% a year at renewal
Perpetual licence
Available with the Server version, on request
Source-code escrow
With an independent agent, at cost
Questions

Enterprise, answered.

What does the Enterprise edition add?

The Server version, including air-gapped installation, a named contact with phone support, three development days a year and a quarterly product review, on top of everything in Professional. Single sign-on and two-step sign-in are in every edition.

What is automated between scoping and the report?

The engagement a client agrees in Flint fills the Slate project with its scope, dates and testers, and issuing the report marks it delivered in Flint; the statement of work is built from the scoping answers, and the invoice from the signed statement of work; the attestation letter and the retest conclusion are written from the engagement's own record.

Can we keep our existing report design?

Yes. The template designer sets page size, fonts, colours, headers, footers, covers and variables without code, and onboarding migrates your current templates.

Can you build features for us?

Yes. Enterprise includes three development days a year; beyond that, custom development is €650 a day. You get twelve months' exclusivity on the features you fund, after which they become part of the product.

How many users does Enterprise start at?

Ten per product. Add users at any time, pro-rated to your renewal date; your clients' users are never counted.