HackerOne, the leading security platform in Attack Resistance Management, has unveiled its enhancements: Pentest-as-a-Service (PTaaS) offering. The innovations include self-service capabilities for scoping and launching tests, as well as new automation features to streamline the user experience on the HackerOne platform.
Enterprises can now manage their jobs more efficiently and receive real-time insights from experienced pentesters to reduce security risks and improve attack defenses. To date, HackerOne's pentesters have reported more than 6.000 verified vulnerabilities.
6.000 vulnerabilities uncovered
"HackerOne Pentest eliminates the inefficient aspects of traditional pentesting solutions," said Ashish Warty, SVP of Product and Engineering at HackerOne. “Traditional pen tests typically take four to six weeks to start and return static results after testing is complete. HackerOne Pentest's improved capabilities allow customers to launch tests within a week and receive in-platform results from pentesters throughout the test deployment.”
Through the HackerOne platform, HackerOne Pentest combines the actual pentesting, retesting, communicating with the testers and analyzing the results into an all-in-one PTaaS experience. New enhancements reduce the complexity of testing, giving customers a number of benefits. This includes:
- Faster testing – Simplified procurement process based on total hours of testing; self-service scoping makes it easier to start and run multiple tests per year.
- maintain program efficiency - New automation and self-service capabilities keep programs flexible and in step with evolving digital security needs.
- Reduce risk in real time - Critical results are delivered to customers as soon as pentesters encounter them, allowing customers to close their vulnerabilities in less time, thereby rapidly reducing their so-called Attack Resistance Gap.
HackerOne Pentest is backed by a group of more than 100 vetted and verified testers from around the world, ensuring high quality and consistent results every time. Each pentester must provide rigorous credentials, including at least three years of proven experience as a professional pentester. In addition, they must either have an OSCP/OSCE/OSWE/CREST certification or have more than 500 HackerOne reputation points.
More at HackerOne.com
About HackerOne
HackerOne closes the security gap between what companies own and what they can protect. HackerOne Attack Resistance Management combines the security expertise of ethical hackers with an inventory of assets and continuous evaluation and improvement of processes to find and close gaps in the ever-evolving digital attack surface.