- Home
- Security audits
- Penetration test
Penetration test: challenge your defences without breaking production
A pentest driven from the console and run by KrakenShield servers, with nothing to install on your side. Reconnaissance, exposed ports, known vulnerabilities and backdoor search, within the scope you authorise and with limited rates.
5 Kredits
- Signed authorisation required
- Non-destructive by default
- Stop at any time
What an attacker would do, within a frame you control
Recognised tools (nmap, nuclei, nikto, testssl.sh), updated every week, chained and tuned never to degrade your service.
Reconnaissance
DNS, subdomains and abandoned subdomains still pointing to a service, exposed technologies.
Ports and services
Network services open on the authorised host and announced versions, to compare with what should be exposed.
Known vulnerabilities
Thousands of nuclei detection templates and nikto checks: vulnerable versions, sensitive files, misconfigurations.
Backdoors
Search for known webshells and backdoors, without ever running them.
TLS and headers
Encryption configuration and security headers, reusing a recent surface audit when one exists.
Advanced phases, on request
Hidden content discovery, SQL injection detection and brute-force protection test: off by default, to be enabled explicitly.
A legal frame before any request
- 1
Prove domain ownership
With a DNS record or a file on the website. A penetration test never runs on an unverified domain.
- 2
Sign the authorisation
Scope, time window and chosen phases: the signed authorisation is kept as a PDF, and nothing goes beyond it.
- 3
Follow the test live
Each phase is shown in real time. One button stops everything at once. The report arrives when the test ends.
Verifiable, ranked findings
Not a raw tool export: deduplicated, explained and prioritised results.
- Findings ranked by severity, with the evidence collected
- Recommended fix for each finding
- Known false positives removed
- PDF report and archived signed authorisation
- Comparison of two tests to check your fixes
Test cost
5 Kredits
Kredits are reserved at launch and deducted only if the test succeeds.
A Kredit costs €29 to €19.03 excl. VAT depending on the pack.
PricingWhat the test does not do
- No denial of service, no mass password guessing, no data modification.
- It does not replace an in-depth manual audit by a certified provider when regulation requires one.
What people ask us
Is it legal?
Yes, within the frame you authorise. Testing a system without its owner’s consent is an offence in most countries: that is why domain ownership and a signed authorisation are required before any launch.
Can the test take my website down?
It is designed to avoid that: limited rates, no denial of service, intrusive phases off by default and immediate stop available. Still, let your host know, as its firewall may block the test addresses.
Which addresses do the tests come from?
From KrakenShield servers in Europe. Their IP addresses are shown in the console so you can allow them or recognise them in your logs.
How long does a test take?
From a few minutes to about an hour depending on the scope and the chosen phases. You follow progress live.
