The definition of PTaaS
To continuously attack infrastructure, computer systems, and applications with the intention of finding security weaknesses. Potentially gaining access to it, its functionality and its data.
Here at TrollEye Security, we’ve developed our PTaaS to eliminate the limitations of an annual penetration test. Annual testing provides only a snapshot-in-time view of the organization’s security posture. Unlike a standard penetration test, PTaaS is a continuous security test for both applications and infrastructure.
The process is simple, you continue to build and manage applications and infrastructure while our on-site or cloud integration servers and scanners continuously your systems for vulnerabilities, modifications, and changes.
As we find vulnerabilities, our team of expert pen testers analyze and then exploit the vulnerabilities in a controlled manner. As soon as a pen tester opens a finding, you are immediately notified via your preferred communications channel.
In Command Center, you have the option to request a re-test or accept the risk. Providing a full audit trail.
Benefits of PTaaS:
Integrating with your cloud providers and on-premise infrastructure allows us to cross-correlate network address translations, virtual IP’s and other important information as it relates to the vulnerable systems.
Providing you a single pane of glass for infrastructure and application vulnerabilities, on-premise and cloud.
Monitoring your software repositories and integrating with your CI/CD pipeline tools allows us to run and analyze Static and Dynamic (SAST/DAST) Application Security Testing every time you deploy code.
Current Integrations Include:
- GitLab, Bitbucket, and Github
- Palo Alto Networks
- Cisco IOS/IOS XE/ASAOS/NX-OS
- Cisco AMP