Web and API testing
In-depth assessment of authentication, authorisation, business logic and exploit paths.
For delivery partners
Need a web or API pentester for an engagement you have already sold?
Perspican takes on selected web and API assessments behind your brand or as a named subcontractor.
- Delivery
- Subcontracted or white-label
- The client relationship and report ownership are agreed upfront.
- Tester
- Giuseppe Lobraico, OSCP
- The same person scopes and delivers the technical work.
- Assurance
- £2m PI cover
- Worldwide cover, with USA and Canada court claims excluded.
The work
Web, API and code work, delivered by the named tester.
Giuseppe spent more than ten years building production software before moving into penetration testing.
That background is most useful on application work where permissions, code and business behaviour matter. Delivery is remote and available internationally in English or Italian.
Source-assisted validation
Targeted code review and validation of scanner, AI or previous assessment findings.
After the report
Technical discussion with the developers, scoped remediation support and retesting.
Working terms
What we agree before testing starts.
NDA, written authorisation, Rules of Engagement, client communication, report branding, conflicts and non-solicitation are agreed before delivery. Rates and availability are shared privately after scope review.
Have an engagement in mind?
Send the target, dates, delivery model and whether the work needs to be white-label.
Prefer to write directly? [email protected]