Weekend and out-of-hours cover
Production testing windows booked with a certified tester, without taking your own team's weekends.
Never turn
work away.
and never run out of work.
Book certified pentesters by the day when you're stretched. Share your bench when you're quiet.
Capacity that flexes with demand.
Three ways firms use the platform.
Overflow capacity
Accept the engagement instead of turning it away. Book testers by the day for peak periods.
Bench sharing
In a quiet week, list idle testers and recover revenue from salary you are already paying.
Simple by design.
Your engagement. Your client. Your report.
-
1
Request
Specify dates, test type and the specialism required.
-
2
Book
Choose a verified tester and agree a day rate before work begins.
-
3
Deliver
The tester works under your scope and authorisation. You retain QA and sign-off.
For testers
Paid for your time.
Not for luck.
Weekend and short-term engagements with established firms. A day rate agreed up front, with a bonus for confirmed high-severity findings.
Verified means verified.
Every tester is checked before they can be booked.
Recognised qualifications
CSTM, CSTL, CREST CRT and CREST CCT only. The certifications UK firms and their clients already require.
Confirmed at source
Certificates are confirmed with the issuing body. Status lapses automatically when a certificate expires.
Specialisms on record
Active Directory, web application, infrastructure, cloud and mobile, backed by qualifications or proven engagements.
Accountable delivery
Work follows a methodology checklist with evidence of coverage, and every booking is rated by the firm.
Questions.
Qualifications
Which qualifications are accepted?
CSTM and CSTL from The Cyber Scheme, and CREST Registered Penetration Tester (CRT) and CREST Certified Tester (CCT). A current certificate in at least one is required to be listed as verified.
How are qualifications verified?
Testers submit their certificate details on registration. We confirm them with the issuing body before the profile goes live, and record the expiry date.
What happens when a certificate expires?
Verified status lapses on the expiry date and the tester cannot be booked until a renewed certificate has been confirmed.
Are OSCP and other certifications accepted?
They can be shown on a profile as skills, but they do not grant verified status on their own. Verification is limited to the qualifications UK firms ask for.
Engagements
Is this CHECK work?
No. The platform supports commercial engagements only. CHECK engagements remain with CHECK-accredited companies and their own teams.
Who is responsible for the engagement?
The booking firm. It owns the client relationship, scope, authorisation and final report. The tester delivers findings and evidence for the firm's own QA.
Can employed testers register?
Only with their employer's consent, which is confirmed on registration. Firms can also list their own staff directly through bench sharing.
How are testers paid?
A day rate agreed before the booking starts, with an optional bonus for confirmed high-severity findings.
Now onboarding.
We are working with our first firms and testers.