Skip to content

Services

What CyberArc does.

Three services. Each one starts with scoping and a signed agreement, and each one ends with a severity-ranked report, remediation steps and one retest.

01

Penetration testing

Authorized testing of your web applications, APIs and networks. Work happens only inside the written scope you sign off, and exploitation stops once impact is proven.

What’s included

  • Web applications
  • APIs
  • Networks
  • Testing only within the written scope
  • Exploitation stops at proof of impact

02

Vulnerability assessments

A structured search for weaknesses across the systems you put in scope. Every finding is ranked by severity and comes with the steps to fix it.

What’s included

  • Assessment of the systems you put in scope
  • Weaknesses identified and ranked by severity

03

AI and agent security

Security testing for AI features and agents: prompt injection, and a review of what your agents, MCP servers and connected tools are permitted to touch.

What’s included

  • Prompt injection testing
  • Review of MCP server and tool permissions

Tailored delivery

Custom software and security integrations

Applications, workflow automation, and tailored VPN, firewall, proxy and endpoint-protection deployments, scoped to your environment.

Requirements, licensing, delivery responsibilities and acceptance criteria are agreed before work begins.

Discuss your integration needs

Deliverables

What every engagement delivers.

The same deliverables apply to all three services.

  • A written report
  • Every finding ranked by severity
  • Remediation steps for each finding
  • One retest

Next step

Start with a scoping call.

Tell us what you need tested. Before any testing begins, the scope is written down and the agreement and rules of engagement are signed.

Book a scoping call