Test scope
Objectives, code versions, environments and permitted activities define what the review covers.
The platform behind the work
AI-driven analysis.
Human judgement.
Integrico Assured is the platform behind our AI-driven code review and pen-test. AI is used for analysis and investigation, while our specialists direct the work, validate the results and stand behind the assessment.
01Objectives and an agreed scope
02Observations and test results
03Assessment and follow-up
How the platform supports the work
From a security question
to a documented result.
The work is organised around what you need to protect and the questions the engagement is to answer.
Analysis and testing
AI analyses code and helps us investigate attack paths. Automated checks complement the analysis. Completed tests and open questions are reported clearly.
Validation
A specialist assesses the observations against the test evidence, the intended access rules and the actual consequences.
Traceable evidence
Relevant code references and test results are linked to the assessment they support.
Clear status
Confirmed weaknesses are separated from suspected ones, informational points and questions that remain to be checked.
Remediation and retest
Clear criteria make it possible to check whether the remediation has had its intended effect.
How the platform is used is adapted to the engagement. Recurring runs, integrations and access to the customer portal are to be described in the agreed delivery.
Your deliverable
Human judgement
throughout the assessment.
An automated match is a piece of evidence. It becomes a validated finding only once the evidence, the intended rules and the consequences have been assessed.
- CandidateA suspected weakness that needs investigating before we can draw a conclusion and determine the severity.
- Validated findingA weakness confirmed by a responsible reviewer, whose name is stated in the report.
- Open verification pointA question where further facts, access or a customer decision is required.
- Verified remediationA fix whose effect has been checked against the agreed criteria.
ILLUSTRATION / THE PATH OF AN OBSERVATIONEvery conclusion
Every conclusion
needs its evidence.
01 / OBSERVATIONA rule match or an unexpected test result.
02 / INVESTIGATIONWhich component is affected, who has access, and under what conditions does the problem arise?
03 / ASSESSMENTWhat is confirmed, what is a hypothesis and what remains?
04 / FOLLOW-UPA recommended fix and a clear criterion for checking the result.
PROCESS ILLUSTRATION · NOT A SCREENSHOT OF THE PRODUCT
How it works
One delivery. Several perspectives.
Protect the right things
Business-critical functions and data give the review its direction.
Review the source
The code analysis examines how the system is built, how sensitive access credentials are handled, and which dependencies are used.
Probe the behaviour
Testing examines the system's access controls and relevant attack paths.
Drive the work onward
The result is used by development teams and security leadership to prioritise remediation.
Good to know
Before your
first engagement.
How is AI used in the review?
AI is used to analyse code and investigate possible attack paths. Automated checks complement the work. A responsible specialist assesses the evidence, validates findings and reports the limitations. The choice of model, access, and handling of source code and data are set in the engagement.
Are we buying a platform or a security service?
You are ordering a specialist-led security service delivered with the support of Assured. Recurring reviews and access to the platform are agreed separately.
Can other areas of review be included?
Threat modelling, architecture review, external vulnerability scanning and cloud configuration can complement the engagement when they are relevant and explicitly in scope.
What does a signed assessment mean?
A responsible reviewer is named and stands behind the assessment within the scope of the engagement. It is not a guarantee of security or a decision on the customer's launch.
How does Assured support compliance?
The evidence, the validated findings, the remediation and the retest trail become part of the proof you need for frameworks such as DORA, NIS2 and ISO 27001 when they are relevant. Assured provides traceable evidence and a signed assessment, not a certification.
Take the next step
Which questions do
you need answered?
We start with the objective and then choose a suitable arrangement for the review.