Skip to content
// Products

Packaged offerings, each in its own domain.

Security products and cloud and infrastructure products, each with its own page, from scope to deliverables.

Security products

SecurityFlow

Security orchestration platform

Pentest as a Service

On-demand offensive security

Phishing as a Service

Realistic phishing simulation

Cloud and infrastructure products

FinOps

Cloud cost optimization

// How to choose

Each product solves a different problem.

See what each one is for, when it makes sense and what you get. The product page has the full scope, the deliverables and the FAQ.

SecurityFlow

What it is for
Bringing SAST, SCA, DAST and cloud posture results into a single dashboard, with normalized and deduplicated findings.
When it makes sense
When you want to bring security into the development cycle, with scans on every push or pull request.
What you get
A multi-tenant platform, with on-premises deployment and integration with Git repositories and task management.

Pentest as a Service

What it is for
Finding real vulnerabilities in applications, APIs, networks, infrastructure and cloud, exploited manually by specialists.
When it makes sense
Before a launch or an audit, or when an enterprise customer asks for evidence of security testing.
What you get
An executive and technical report, with CVSS and proof of concept, and a free retest within 30 days of delivery.

Phishing as a Service

What it is for
Measuring and training people's resilience with controlled, realistic phishing campaigns.
When it makes sense
When you need to know how teams react to social engineering and reduce repeat clicks.
What you get
An executive report with metrics by team, an analysis of risk points and awareness material.

FinOps

What it is for
Seeing and reducing your AWS cloud cost, with ongoing governance (GCP and Azure coming soon).
When it makes sense
When the cloud bill keeps growing and it is not clear where each dollar goes.
What you get
A spend dashboard by account, service, team and tag, rightsizing and Savings Plans recommendations with a simulation before purchase, budget alerts and showback.
// FAQ

Questions about the products

What is the difference between Pentest as a Service and SecurityFlow?

Pentest as a Service is an on-demand test run by specialists, with manual exploitation and a report. SecurityFlow is a platform that automates SAST, SCA, DAST and cloud posture scans continuously and gathers the results in one dashboard. Neither replaces the other: manual testing finds what a scanner cannot reach, and the scanner covers the development cycle day to day.

Is SecurityFlow a service or a platform?

It is a platform. The analysis engines are built by FF Tech and run as independent containers, with tenant isolation.

Can I audit my cloud bill before signing up?

Yes. The FinOps page has an online tool to audit your AWS Cost Explorer or CUR 2.0 data. Processing happens in memory, with no data retention.

How do I hire a product or ask questions?

Through the form on the contact page. Each product has its own page with scope, deliverables and a FAQ.