Question 1

What does a pentest with ITERRUPTIVO include?

Accepted Answer

A full pentest includes: attack surface reconnaissance and enumeration, OWASP Top 10 vulnerability testing, authentication and authorization testing, infrastructure configuration analysis, API and endpoint testing, and where applicable, social engineering tests. The deliverable is an executive report (for CEO/CTO) and a detailed technical report (for the development team) with severity, evidence, and prioritized remediation steps.

Question 2

What is OWASP SAMM and why does it matter?

Accepted Answer

OWASP SAMM (Software Assurance Maturity Model) is the industry-standard framework for measuring and improving security maturity in software development teams. It evaluates 15 security practices across 5 business functions on a scale of 0 to 3. The global average is 1.44 — most companies react to vulnerabilities rather than prevent them. A SAMM assessment with ITERRUPTIVO pinpoints exactly where your team stands and what to change first to reduce real risk.

Question 3

What is Robin Hood?

Accepted Answer

Robin Hood is ITERRUPTIVO's autonomous pentesting system — a multi-agent AI platform that executes security tests autonomously against web applications, APIs, and networks. Cristian Luciano (CISO) designed Robin Hood to combine AI speed with senior pentester judgment. Results are manually validated before reporting to eliminate false positives.

Question 4

What is Leakint?

Accepted Answer

Leakint is our credential intelligence platform. It monitors leaked databases and dark web sources in real time to detect if your organization's credentials — corporate emails, passwords, tokens — have been compromised and are in circulation. For companies, it is a critical early-detection tool before a leaked credential becomes a breach.

Question 5

How long does a pentest take?

Accepted Answer

A standard web application pentest takes 5 to 10 business days, depending on application complexity (number of endpoints, authentication flows, integrations). A full OWASP SAMM assessment takes 2 to 4 working days including development team interviews. Reports are delivered within 3 business days after execution.

Question 6

Do you offer continuous security testing or only one-time projects?

Accepted Answer

Both. We offer pentesting as a one-time project (before a launch, before a compliance audit, or as an annual exercise) and as a continuous monthly retainer service. The continuous model includes Leakint monitoring, periodic automated scanning with Robin Hood, and a quarterly SAMM follow-up assessment to measure progress.

Question 7

Does the pentest report include remediation support?

Accepted Answer

Yes. Every finding in the technical report includes: technical vulnerability description, evidence (screenshots, payloads, logs), CVSS severity, and specific remediation steps for the client's stack. We also offer review sessions with the development team to address remediation questions, and a post-remediation verification test at a reduced rate.

Question 8

Can you help with SOC2 or ISO 27001 compliance?

Accepted Answer

Yes. We are not auditors, but we prepare teams for SOC2 Type II and ISO 27001 audits. This includes a gap assessment against required controls, implementation of technical controls (DevSecOps pipelines, secrets management, audit logging), policy and procedure documentation, and pre-audit dry runs before the real examination.

Seguridad Ofensiva. Defensiva. Inteligente.

Pentesting Autónomo con IA

Reconocimiento Automatizado

Explotación Controlada

Reportes SOC 2 / ISO 27001

9 Agentes en Paralelo

Inteligencia de Credenciales Filtradas

Dark Web Indexing

Búsqueda Instantánea

Alertas en Tiempo Real

Actualización Diaria

Seguridad en Cada Commit

Compliance-Ready desde día 1