Coverage across every surface
From the external perimeter to internal infrastructure: every attack surface assessed with real technical depth.
Web Application
Complete OWASP Top 10, business logic, authentication, authorization, REST/GraphQL APIs and injection across the whole application surface.
External Infrastructure
Passive and active reconnaissance, enumeration of exposed services, exploitation of misconfigurations, privilege escalation and lateral movement.
Internal Network
Assuming initial access: internal scanning, Active Directory attacks (Kerberoasting, Pass-the-Hash), pivoting and domain compromise.
Cloud & DevOps
Misconfigurations in AWS, GCP and Azure, excessive identity permissions, secrets exposed in repositories and vulnerable CI/CD pipelines.
APIs & Integrations
REST, GraphQL, gRPC and webhooks. OAuth/JWT authentication, IDOR, rate limiting, injection and data leakage through API responses.
Based on the most rigorous frameworks in the industry
FF Tech's own methodology, aligned mainly with PTES, OWASP and MITRE ATT&CK, for a structured, traceable and reproducible test within the agreed scope.
Reconnaissance
OSINT, passive and active enumeration, attack surface mapping and identification of exposed technologies.
Vulnerability analysis
Automated scanning complemented by manual review, removing false positives and finding complex issues.
Controlled exploitation
Exploitation of the vulnerabilities in a controlled environment to confirm real impact and the depth of the compromise.
Post-exploitation and pivoting
Analysis of lateral movement, privilege escalation and persistence to map the maximum impact that can be reached.
Report and remediation
Technical report with CVSS, proof of concept, evidence and a remediation plan. Free retest for 30 days after the report is delivered.
Beyond the scanner report
Every vulnerability is confirmed and exploited manually. Every finding is validated manually, with a proof of concept, before it enters the report. Real business impact documented.
Manually validated findings
Every vulnerability is confirmed manually with a proof of concept before it goes into the report.
Executive and technical report
An executive report for leadership with business impact and a technical report with CVSS, evidence and reproduction steps.
Free retest for 30 days
Within 30 days after the report is delivered, we revalidate the fixed vulnerabilities at no cost, with a validation letter.
Attestation letter
A formal document with scope, dates and test result, required by audits, SOC 2, ISO 27001 and enterprise clients.
Technical debrief
A live meeting with your development and security teams to walk through the vulnerabilities, answer questions and prioritize the fixes.
From a one-off test to an ongoing program
Choose the format that fits where you are today. Scope and proposal are defined together.
- ✓1 scope of your choice
- ✓Manual + automated testing
- ✓Executive + technical report
- ✓Free retest for 30 days
- ✓Attestation letter
- ✓Up to 3 combined scopes
- ✓Red team simulation
- ✓Executive and technical report
- ✓Free retest for 30 days
- ✓Findings portal
- ✓Live technical debrief
- ✓Quarterly pentests
- ✓All scopes
- ✓Progress reports
- ✓Dedicated CSM
- ✓ISO 27001 / SOC 2 support