Compliance pen testing. Fast. Fixed price.
Third-party penetration testing evidence for procurement packs, supplier assessments, insurance renewals, and stakeholder due diligence. Report in minutes, not weeks.
Evidence for the people who actually ask for it.
Katana AUTO produces third-party pentest reports designed for the buyers and stakeholders who demand them — without the cost, timeline, or consulting overhead of traditional engagements.
Procurement packs
Close deals faster with a ready-to-attach third-party pentest report. No more drawn-out security questionnaires stalling your pipeline.
Supplier assessments
Satisfy vendor onboarding and supplier assurance requirements with a credible, independent pentest — not a self-attested checklist.
Insurance renewals
Cyber insurance underwriters increasingly require pentest evidence. Get compliant documentation without delaying your renewal cycle.
Stakeholder due diligence
Investors, board members, and auditors want security evidence. Deliver a professional pentest report on demand — at a predictable cost.
A live dashboard, and a report
your buyer will actually accept.
Submit your domain, and Katana AUTO runs a structured external pentest workflow end-to-end — surfacing findings in a live dashboard and delivering a compliance-ready PDF alongside machine-readable output.
One workflow, one report. Submit the target, watch findings surface in real time, and receive a compliance-ready PDF alongside SARIF & JSON exports — all from one workflow, in minutes, not weeks.
Contact usThree steps. One report. No consultants.
Get an instant quote
Enter your domain. Answer a handful of scoping questions. See your fixed-price quote and delivery date in under five minutes — no calls, no scoping workshops.
We run the test
Our AI-powered engine runs a structured external, black-box penetration test across your website, public APIs, and exposed services — following CREST-led methodology end to end.
You receive your report
A compliance-ready PDF with executive summary, technical detail, and remediation guidance — plus SARIF / JSON exports for your security tooling. Ready to share.
Fixed price. No surprises.
Pick the scope that matches your estate. Pay a single, upfront price. Receive your report on the delivery date quoted — every time.
For small organisations needing compliance evidence against a single public-facing website or application.
- External black-box testing
- One domain · core compliance checks
- PDF report & executive summary
- Report usually within 2 hours
The workhorse package for growing organisations. Broader surface coverage, API testing, and deeper checks for a richer report.
- Everything in Starter
- Up to 3 domains / subdomains
- Public & associated API testing
- Expanded check library (135+)
- SARIF & JSON exports
For larger estates and higher-stakes compliance programmes. Full external coverage, priority delivery, and a retest window built in.
- Everything in Standard
- Up to 10 domains / APIs
- 72-hour CREST-verified turnaround
- Retest included after remediation
- Named support contact
Between an automated vulnerability tool and a £30k consultancy engagement.
You don’t need a six-week consulting engagement for annual compliance evidence. You also can’t send automated vulnerability tool output to a procurement team. Katana AUTO sits precisely in between — at SaaS speed and SaaS price.
- Not accepted for compliance
- No human methodology
- High false-positive rate
- No executive-ready report
- Third-party pentest evidence
- CREST-led methodology
- Fixed price from £750
- Report in minutes, not weeks
- Weeks of scoping & booking
- £10k – £40k per engagement
- Overkill for external-only scope
- Unpredictable renewal cost
Common questions from compliance buyers.
If you have a question that isn’t answered here, get in touch — we respond within one business day.
Get in touchIs a Katana AUTO report accepted for compliance and supplier assurance?
Yes. Katana AUTO produces a third-party penetration test report suitable for procurement packs, supplier assurance, insurance renewals, and stakeholder due diligence. The methodology is CREST-led and powered by Samurai Digital Security Ltd’s offensive security practice.
How quickly will I receive my report?
Automated reports are usually delivered in under 2 hours. If you need your report verified by Samurai Digital Security Ltd’s human CREST-registered penetration testers, turnaround is 72 hours.
What’s tested in scope — and what isn’t?
Katana AUTO focuses on external, black-box testing: public-facing websites, web applications, public and associated APIs, and exposed services. Internal networks, Active Directory, and authenticated complex environments are handled by our premium sister brand, Samurai Digital Security Ltd.
Is this just an automated tool or a real penetration test?
It’s a real pentest. Our AI-powered engine runs a structured CREST-led methodology end to end — recon, mapping, exploitation, and reporting. Every Katana AUTO engagement is shaped by the same offensive security experience that powers Samurai Digital Security Ltd’s consultancy work.
What do I actually receive at the end?
A compliance-ready PDF report with an executive summary, technical findings, severity mapping, and remediation guidance — plus SARIF and JSON exports for your security tooling and ticketing systems. Everything is branded neutrally and ready to forward to buyers or auditors.
Compliance evidence.
Minutes, not weeks. From £750.
Get an instant quote in under five minutes. No calls, no scoping workshops — just a fixed price and a confirmed delivery date.