Testing services
Every test we do, in one place.
Human-led, AI-augmented, continuous. Expert, CREST and Cyber Scheme accredited testers work alongside Velma, our own AI tester, and everything is delivered through the Rootshell Platform. Choose the service you need, or talk to us about the mix.
The full suite
Pick the test that fits what you need to protect.
Every assessment we run, grouped by what it protects. Linked services have their own page with scope and deliverables; for the rest, talk to us.
Applications, APIs and code
- Web application assessment
- Web services and API assessment
- Mobile application assessment
- Mobile device testing
- Apple (iOS) device and application assessment
- Mobile device management assessment
- Desktop application review
- Secure code review
Infrastructure and network
- External infrastructure assessment
- Internal infrastructure assessment
- Server and workstation build reviews
- Database server build reviews
- Active Directory audit
- Firewall and router rule set assessment
- VPN and remote access testing
- Citrix assessment
- Wi-Fi security assessment
- VOIP security testing
- Anti-virus, content filtering and client-side assessments
- EPOS assessment
- Local government testing
Cloud and Microsoft 365
See cloud services testing →AI and emerging technology
- AI-enabled penetration testing and red teaming
- AI security assessments
- AI and agentic deployed workflows
- AI-enabled applications
- Operational technology (OT)
- SCADA assessment
- OT and IoT security assessments
Red, purple and adversary testing
- Red team assessments
- Purple team assessments
- Simulated attack assessments
- Adversary emulation assessments
Not listed, or not sure which fits? Talk to us and we will scope it with you.
Choose how you buy it
One-off, or continuous.
Project-based penetration testing
One-off, targeted engagements when you need a test for a release, an audit or a customer.
Learn more →Continuous penetration testing
Ongoing testing through the contract, with Velma exploit intelligence, remediation management, SLA tracking and retesting included. Choose Core or Managed.
Learn more →Vulnerability assessment and penetration testing
Broad coverage of your estate, with the findings that matter validated by a tester.
Learn more →How we test
The same method behind every service.
Whatever the target, the approach is human-led. Our testers direct the tools, review what they produce, and work within the scope and authorisation you agree.
Scope
We agree what is in scope, what matters most to the business and the rules for the test.
Test
Expert testers lead, working alongside Velma, our own AI tester, which reads and joins up the data no team has time to do by hand.
Report
Findings land in the Rootshell Platform with exploit intelligence, prioritised by severity and your asset priorities.
Fix
Track remediation with workflows, integrations and SLA reporting, so owners know what to do next.
Retest
Retesting is included, so fixes are proven and the record stays current.
Human-led. AI-augmented. Continuous.
Not sure which test you need?
Tell us what you need to protect and we will point you to the right service, or a mix of them.
Explore the platformWritten and reviewed by the Rootshell R&D team. Rootshell was founded six years ago and is founder-led, drawing on more than 30 years of industry experience from previous successful businesses. We deliver thousands of testing days every year. CREST registered, Cyber Scheme accredited, ISO 27001 certified, an IASME Cyber Essentials Plus certification body, and NCSC CHECK scheme accredited.