Web, API and mobile pentesting
Testing focused on permissions and business logic, with every exploit path confirmed by hand.
For delivery partners
Web, API and mobile pentesting for security consultancies.
Perspican takes on selected web, API and mobile assessments behind your brand or as a named subcontractor.
- Delivery
- Subcontracted or white-label
- The client relationship and report ownership are agreed upfront.
- Tester
- Giuseppe Lobraico, OSCP
- The same person scopes and delivers the technical work.
- Assurance
- £2m PI cover
- Worldwide cover, with USA and Canada court claims excluded.
The work
What you can hand over.
Giuseppe spent more than ten years building production software before moving into penetration testing.
That background helps most on application work, where the serious flaws sit in permissions and business logic. Delivery is remote, in English or Italian.
Finding validation
Scanner, AI or earlier assessment findings checked against the client’s code, with a decision on each one.
After the report
Retests of the client’s fixes, and technical calls with their developers when you want them.
How it runs
Your client sees only your brand.
You keep the client relationship for the whole engagement, and the testing happens inside it.
- Scope with you
You share the target and the client’s constraints. Effort and dates are confirmed before you commit them to the client.
- Test under your terms
Testing follows the agreed Rules of Engagement. Contact with the client goes through you unless you decide otherwise.
- Report in your format
Findings are written in your report template, ready for your review before the client sees them.
Working terms
What we agree before testing starts.
Everything below is agreed in writing before delivery begins.
Authorisation
Written authorisation from the client and Rules of Engagement for the test.
Confidentiality
An NDA, and a conflict check against the client before you confirm the work.
Client relationship
Who talks to the client and whose name is on the report. Your clients are never approached directly.
Rates and availability
Shared privately once the scope has been reviewed.
Engagements start with a scoping call with you.
Send the target and dates, and say whether the work is white-label or subcontracted.
Prefer to write directly? [email protected]