Security & Testing
Automated offensive scanning, full audit and load testing — always running, no waiting on a consultant's calendar.
What's included- Security & Pentest
- Full Audit
- QA & Load testing
Monitoring & security platform
Your whole operation under watch. In a single panel.
Servers, sites, email, vulnerabilities and compliance watched 24/7 — with instant alerts and a report ready to hand to your client. No stitching ten tools together.
Install the agent in one command
curl -fsSL https://pentesternow.com.br/agent/install.sh | sudo TFM_TOKEN=... bashPlatform online
What goes under watch
Servers
Sites & Web Apps
Email & DNS
APIs
Four fronts, a single panel
Each front covers a part of your operation. Together, no blind spot is left.
24/7 Monitoring
Server, site, performance and uptime watched around the clock — with a public status page for your clients.
What's included- Server monitoring
- Website monitoring
- APM, Logs & Anomalies
- SLA & Status Page
Compliance & Trust
Email hygiene, mapping to international standards and verified backups — the baseline every auditor asks for in the first meeting.
What's included- Compliance
- Domain email
- Resilience & Backups
Integrations & Automation
Alerts in the channel your team already uses and API triggers, to fit the workflow you already have.
What's included- Smart alerts
- API & Agents
The 12 features, up close
All of it ships turned on. You don't pay module by module.
Server monitoring
CPU, memory, disk, network, processes and uptime via a lightweight agent (Win/Linux/macOS).
Website monitoring
Uptime, response time, SSL validity, expected content and origin vs CDN.
Security & Pentest
Port, TLS, header, web-exposure, CVE scanning and asset discovery — defensive.
Domain email
SPF, DKIM, DMARC, MX, DNSSEC, MTA-STS, BIMI, reverse DNS and blacklist (DNSBL).
Full Audit
Vulnerabilities + login + load in one click, with a graded report (grade, score, roadmap).
Compliance
Maps findings to ISO 27001, SOC 2, LGPD, NIST, OWASP, CIS, PCI-DSS and GDPR.
Smart alerts
Email, Telegram, Slack and webhook, with anti-spam, maintenance windows and escalation.
APM, Logs & Anomalies
p50/p95/p99 latency, centralized logs and AI anomaly detection (EWMA/z-score).
SLA & Status Page
24h/7d/30d availability, automatic incidents and a public status page for your clients.
QA & Load testing
Synthetic flows (login → action → assertion) and load tests with latency percentiles.
API & Agents
Trigger audits via API (token, versioned) and install the collector with one command.
Resilience & Backups
Automatic DB backup, integrity check, watchdog and blacklist monitor for your IP.
From zero to first alert in minutes
01
Add your targets
Servers with one agent command, sites by URL or IP and email domains. It comes pre-configured — just click run.
02
We watch 24/7
Availability, performance, SSL, vulnerabilities, email, blacklist and anomalies — automatically, without configuring dozens of checks by hand.
03
Get alerts and reports
Instant alert by email, Telegram, Slack or webhook — plus a graded report with the “how to fix”, ready to hand to your client.
PentesterNow and traditional consulting
It's not against manual pentesting — it's what runs every day, between one engagement and the next.
Aspect
PentesterNow
Traditional consulting
Time to start
Minutes
Weeks of proposal and scheduling
Frequency
Continuous, 24/7
One-off, once or twice a year
Problem alert
Instantly, in your channel
Only in the final report
Report
Always current, generated on demand
Static document, ages fast
Cost
Predictable subscription
Fixed-scope project quote
Why PentesterNow
- All in one — monitoring, security, email and compliance in the same panel.
- Client-ready report — grade, score and roadmap mapped to ISO, SOC 2, LGPD and PCI.
- Your data stays yours — self-hosted, no shipping your infrastructure to third parties.
- Four languages — panel and reports in Portuguese, English, Spanish and Chinese.
Every finding, tied to a standard
The Full Audit doesn't hand back a loose list of problems: every finding comes tied to the matching control in these frameworks.
ISO 27001Information security management (ISMS)
SOC 2Security & trust service controls (AICPA)
LGPDBrazil's General Data Protection Law
NIST 800-53Security & privacy controls (Rev. 5)
OWASP ASVSApplication Security Verification Standard
OWASP Top 10The 10 critical web app risks
CIS ControlsPrioritized practical safeguards (v8)
PCI-DSSCardholder data security (v4)
GDPREuropean Union data protection
Built for any online operation
SaaS & Startups
E-commerce
Fintechs
Agencies & Devs
Security teams
Frequently asked questions
What does PentesterNow monitor?
Servers (CPU, memory, disk, network, processes and uptime), websites (uptime, response time, SSL validity and expected content), your domain email (SPF, DKIM, DMARC, MX, DNSSEC and blacklists) and the exposed surface: ports, TLS, headers and known vulnerabilities.
Do I need to install anything?
Only on the server, and it is a single command. The agent is lightweight and runs on Windows, Linux and macOS. Websites, APIs and email domains need no installation at all — just point us at the URL, IP or domain.
Is the report usable for audits and certification?
Yes. Every finding comes tied to the matching control in ISO 27001, SOC 2, LGPD, NIST, OWASP, CIS, PCI-DSS and GDPR, with a grade, a score and the remediation path — in the shape auditors ask for.
How do alerts reach me?
By email, Telegram, Slack or webhook, the moment the problem happens. There is anti-spam control, maintenance windows and escalation, so your team is not woken up by noise.
Do you keep our data?
No. The platform is self-hosted: it runs on your own infrastructure and the collected data stays with you. There is no need to hand your operation over to a third party.
Ready to sleep easy?
Send a WhatsApp message and we'll put together a plan your size.