The PentestLouis libraryUnderstand security.
Understand security.
Decide better.
Hands-on guides to choose the right level of audit, interpret the tools and prepare the checks of your SaaS.
Featured / Decision guide
Two approaches. Better coverage.
Decision guide
Automated or manual pentest: which should you choose?
The two approaches do not meet the same need. Automation brings frequency and repeatability; a human expert brings context, creativity and accountability for the engagement.
Read the guideThe essentials
Dig deeper.
02 / EXPLORE
Budget and scope
How much does a web application pentest cost?
Understand what drives the price of a web pentest: scope, roles, APIs, business logic, depth, reporting and retesting.
Read the guide03 / EXPLORE
Understanding AppSec tools
SAST, DAST and SCA: three complementary perspectives
Understand the differences between static analysis, dynamic testing and dependency auditing, and the risks each method covers.
Read the guidePut it into practice
Start for freeA first step toward a safer application.
Choose your GitHub repositories and get a clear first diagnosis. Your code is accessed read-only.