PenDashboardAuthorised security testing

Scope-bound by design
Passive inventory, evidence review and DORA-aligned reporting.

SECURE ADMIN CONSOLE

Welcome back

Sign in to manage authorised assessments and client reports.

Eight-hour secure session · SameSite cookie protection

PenDashboardDORA-aligned workspace
Controlled engineApproval-gated profiles
Authorised mode

SECURITY OPERATIONS

Assessment overview

Current-session view of authorised targets, passive observations and client evidence.

Safety guardrail active — approved public targets only; automated adapters exclude exploitation, denial of service, brute force, credentials and state-changing templates.
0Completed scans
In this browser session
0Review observations
Configuration signals, not confirmed findings
0Endpoints observed
Within approved scope

QUICK START

Run an authorised assessment

01

Use passive inventory immediately, or approve the engagement for isolated Nmap, Nuclei and Nikto automation.

RECENT ACTIVITY

Latest scans

No scans yet

Completed assessments will appear here.

DORA CONTROL PLANE

Engagements

Create a signed-scope record and authorise it before a scan can run.

Persistent control-plane storage is unavailable. Configure PostgreSQL before executing a production assessment.

NEW ENGAGEMENT

Rules of engagement and approved scope

REQUIRED

Engagement register
EngagementRoETargetsStateExpiresAction
No engagements yet

Create a draft, then authorise its scope before scanning.

SCOPE MANAGEMENT

Authorised targets

Targets appear after an administrator confirms written authorisation and runs an inventory.

Target groupsSession-only activity
NameClientEndpointsAttestationLast observed
No targets recorded

Run an authorised scan to populate this view.

BOUNDED ASSESSMENT

Scans

Run passive inventory or approval-gated automated TLS, DNS/email, HTTP, network and web-security adapters.

NEW SCAN

Authorised security assessment

SCOPE ENFORCED

EXECUTION BOUNDARY

Automated profile

  • TLS versions, certificate trust and expiry
  • SPF, DMARC, CAA, MX and DNS context
  • Security headers, cookies, CORS and methods
  • IP-pinned Nmap, safe Nuclei and bounded Nikto
  • New, recurring and not-observed retest comparison
Excluded exploitation, unsafe templates, denial of service, brute force, credentials, phishing and state changes.
Scan history
Scan IDEngagementTarget countStatusObservationsCompletedReportAction
No scans in this session

Your next completed inventory will appear here.

CONTINUOUS ASSURANCE

Schedules

Queue recurring standard assessments only while the approved engagement and target allowlist remain valid.

Due schedules are materialized by the isolated worker. Expired engagement authorisation automatically stops future runs.

NEW SCHEDULE

Recurring authorised assessment

APPROVED SCOPE ONLY

Recurring scan register
EngagementTargetsFrequencyNext runLast runStatusAction
No recurring scans

Create a schedule for an approved engagement.

ASSESSOR REVIEW

Findings

Low-impact configuration signals require human validation before they become reportable client findings.

These entries are observations, not confirmed vulnerabilities or DORA compliance conclusions.
Finding register0 observations
ObservationTargetPriorityEvidence classRetest stateStatusReview
No observations yet

Run an inventory, then validate its signals.

REMEDIATION REGISTER

Assign a confirmed finding

CLIENT DELIVERABLES

Reports

Generate and download branded PDF reports with explicit scope, findings, remediation and review status.

Generated reportsTenant Owner approval and deletion
Report IDTypeStatusCreatedAction
No reports generated

Reports created during this session will appear here.

MANUAL RECORD

Document a validated test

DIGITAL OPERATIONAL RESILIENCE

DORA programme

Maintain critical functions, assets, annual testing, incidents, providers, resilience exercises and accountable evidence.

This workspace supports DORA governance and evidence. It is not a compliance certification or an automated regulatory submission service.
0Governance records
Functions, assets, tests and operational records
0Overdue actions
Open records beyond their due date
—Evidence integrity
Not checked

CONTROL REGISTER

Add governed DORA record

OWNER APPROVAL

DORA governance register
Type / recordOwnerCriticalityStatusDueApproval
No governance records

Start with a critical function, its supporting asset and an annual test programme.

SINGLE-ADMIN MODE

Admin access

Your Tenant Owner account can create, authorise, test, review and approve all work without delegated roles.

Tenant access registerExisting secondary accounts can be suspended, reactivated or deleted. Changes remain audit-recorded.
UserStatusCreatedAccess actions

No access register available

ACCOUNT

User profile

Review your account details and keep your sign-in credentials current.

AD

Administrator

Organisation admin

Active

BASIC INFORMATION

Personal details

SECURITY

Change password

PDF-DERIVED CONTROL LIBRARY

Test catalogue

Bounded objectives synthesised from the supplied penetration-testing and cloud-security references.

PenDashboard · Authorised assessments only · Tenant Owner actions remain audit-recorded