Every finding is documented using their online portal and we are notified immediately. This means that our dev team can start addressing issues as soon as possible and request a re-test as soon as the issue has been resolved. Each finding identifies a specific item, how to replicate the test so you can see for yourself, and instructions, guidance and/or links to official documentation about how to resolve the item. This makes implementing any changes easy and often a superb learning experience.

Our company used OnSecurity for a web application penetration test. They were very responsive both before and during the test. We were able to get the scoping done in the initial call which was with technically minded staff who clearly understood the details of what needed to be done and had answers to hand. The results of the test were clear and easy to understand with full details of suggested remediation. All retesting was done within days. Overall our expectations were greatly exceeded and we would happily work with OnSecurity again.

The entire process of booking and the pen test itself can be done through their web portal. It gives us a one-stop-shop for all of our compliance evidence. The team however are open to conversation if you need something more custom and lovely to work with. It's a great balance of tailor-made testing with standardised artefacts. Their platform is a treasure chest of features, they keep adding more relevant and useful tools to help keep our company secure.