Slate runs penetration testing engagements from brief to delivery and gives every client their own client portal. Testers work through a guided engagement with 13 built-in testing guides (OWASP WSTG, MASVS, MITRE ATT&CK, CIS, CISA SCuBA, PCI DSS 11.4 and more), score findings with CVSS 4.0 from a reusable findings library, and a named reviewer approves every report before it is issued. Reports come in PDF, Word and Excel from one template, stay frozen and versioned once issued, and an attestation letter is generated and signed on delivery. Clients read findings, accept risks, request retests and download reports in a client portal that is free for every client user. Specialist engagements include PCI DSS network segmentation, Microsoft 365 against CIS and CISA SCuBA, and cloud against CIS and MITRE ATT&CK. Single sign-on and two-step sign-in in every edition; a dedicated hosted instance in the region you choose, or self-hosted and air-gapped on Enterprise. Built by PenTest Hub, a penetration testing company since 2017; connects with Flint for scoping and project management.
