Casco Supervised

Our pentest pricing is based on the scope of the test.

Available within a few business hours for a rush fee. Within 5 business days latest.

Yes, we can provide attestation letters for compliance purposes.

Yes, we can test authenticated scenarios and business logic flaws. In fact, we encourage you to provide multiple tenant-isolated test credentials with separate roles and permissions.

Yes. We offer direct line of communication with the security engineers over Slack, Teams, or email.

Casco Supervised tests for OWASP Top 10, OWASP API Top 10, OWASP LLM Top 10, OWASP Cloud Top 10, OWASP Agentic Threat Model, and proprietary threat vectors. We exclude any systems that are out of scope.

Yes. By default, we offer free 90-day retesting as often as needed until the findings are resolved. Extended retesting periods are available at an additional cost.

Our human security engineers perform two critical activities: 1) Prioritizing the test scope to ensure full coverage and 2) Reviewing and verifying the findings to reduce false-positives. The rest is managed by the pentesting agent that can perform hundreds of security tests in parallel.

Yes, we can define specific boundaries and out-of-scope systems. We will exclude any systems that are out of scope.

We have multiple safeguards in place to prevent the agent from causing system disruptions. The agent is only allowed to test systems that are explicitly defined as in-scope. The agent does not perform DDoS attacks or resource exhaustion attacks. The agent will only try to perform data exfiltration with the test credentials provided by you.

You will receive three artifacts. 1) A comprehensive initial report with all the findings, including impact, remediation steps, and verification. We will also provide a summary of the findings and a list of the most critical findings. 2) A remediation report after the findings are retested. 3) A "clean" pentest report showing "no findings" when all findings are resolved.

Yes, we can provide attestation letters for compliance purposes.

Yes, Casco is a CREST-accredited penetration testing company, meeting rigorous international standards for security testing excellence, methodology, and ethics.

Casco Supervised can perform security testing on any system that is accessible over the internet. This includes web applications, APIs, cloud infrastructure, and AI systems.

Casco Supervised offers the best of both worlds. Expert human security engineers with years of experience and an autonomous pentesting agent that can perform hundreds of security tests in parallel. This unique combination ensures that we can provide the necessary attestation letters for compliance purposes, test extensively in parallel, and reduce false-positives.