A traditional pentest is a point-in-time engagement. Nubesti is built to replay the same authorized scope on a schedule you choose. It does not replace every form of manual assessment, and it does not claim to find every vulnerability.

Workflows can be mapped to MITRE ATT&CK techniques and to OWASP risk classes. Mapping is not the same as executing every technique in the matrix. Reports should show which mapped checks ran.

We do not publish a 99% accuracy figure. Findings are validated with exploitability checks and evidence to reduce scanner noise. False positives can still occur.

No. We do not display those logos as current certifications. Platform controls are described in the Trust Center and legal security overview. You can use dated findings in your audit packs.

You choose the scope. Many teams start on staging and promote a thin production scope. Rate limits and a portal stop control are part of the intended safety model. See Rules of Engagement.

Create an account in the portal, complete paid KYC, designate assets you own or have written permission to test, then launch. Sales walkthroughs: the contact page.