CAIT
Continuous Assured Intelligent Testing

Continuous penetration testing for Web Applications, Firewalls & APIs

CAIT tests your web applications, firewalls, and APIs continuously — automated and human-reviewed, aligned with OWASP and run by CREST & OffSec Certified professionals. You get clear, prioritised findings on the schedule you choose.

No charge during your trial · cancel any time

Simple per-asset pricing

One subscription per asset — web application, firewall, or API — with unlimited testing. Start with a 7-day free trial — one asset and two test runs, no charge.

Monthly

£250per asset / month
  • ✓Unlimited testing across your assets
  • ✓Automated + human-reviewed by CREST & OffSec Certified professionals
  • ✓Prioritised findings dashboard + history
  • ✓Compliance-ready reports
Start free trial
Save ~10%

Annual

£2,700per asset / year
  • ✓Unlimited testing across your assets
  • ✓Automated + human-reviewed by CREST & OffSec Certified professionals
  • ✓Prioritised findings dashboard + history
  • ✓Compliance-ready reports
Start free trial

Each asset runs on a 12-month term. Prices exclude VAT.

●Continuous, not point-in-time
●Human-reviewed by CREST & OffSec Certified professionals
●Aligned with OWASP methodology
●Clear, visual findings

Security testing that keeps up

Web Applications, Firewalls & APIs

Test your external attack surface — web applications, firewalls, and APIs — from one continuous subscription, so new issues surface as things change.

Automated + manual

Automated techniques at scale, combined with manual, human-reviewed testing by CREST & OffSec Certified security professionals.

Clear, visual findings

Prioritised results in a dashboard — severity at a glance, per-target detail, and a history of every test you run.

Compliance-ready reports

Use your reports as supporting evidence for ISO 27001, SOC 2, Cyber Essentials Plus, PCI DSS, and NIST CSF.

You stay in control

Scope exactly what's in bounds and authorise it before any testing begins. Nothing is tested without your sign-off.

On your schedule

Choose a reporting cadence — daily, weekly, or monthly — and change it whenever you need to.

How it works

1

Scope & authorise

Add your asset — a web application, firewall, or API — set what's in scope, and authorise testing. This produces the engagement's scope.

2

We test continuously

CAIT runs automated and human-reviewed testing against your authorised scope, safely and within your limits.

3

Findings & reports

Review prioritised findings in your dashboard, with history over time and reports you can share.

See what’s exposed — before someone else does

Set up your first asset in minutes and start a free trial today.

Start your 7-day free trial