Built for the work.By people who do it.

Since 2017, PenTest.WS has built enterprise software for offensive security teams, deployed entirely on infrastructure you control.

Est. 2017 Denver, Colorado Built by practitioners
01 / The beginning
In July 2017, I was studying for the OSCP and went looking for a purpose-built tool to organize a penetration test. There wasn't one. So I built it. Everything we have shipped since answers a problem we have hit in the field.
Adam BenwellFounder & CEO
The company

PenTest.WS LLC

Founded

2017, Colorado

Ownership

Privately held.
No outside investors.

Headquarters

Denver, Colorado

02 / The chapters

Eight chapters.
One conviction.

I / VIII
Chapter IOrigin
2017

The tool that did not exist.

Development begins. A pentester studying for the OSCP builds the tool the job needed.

Chapter IICompany
2018

A company in Colorado.

PenTest.WS LLC is formed in March 2018. The private beta opens to working testers.

Chapter IIISovereignty
2019

Who owns the data? You.

Pro launches: offline and self-hosted, for testers under strict NDA. Our sovereignty stance starts here.

Chapter IVReporting
2021

Version 2.0.

A findings system, a DOCX reporting engine, shared engagements and a REST API.

Chapter VScale
2022

Enterprise scale.

Engagements grow to tens of thousands of hosts. The platform keeps up.

Chapter VIPeople
2025

The human attack surface.

Social engineering, an events timeline, findings groups, reporting briefs and file shares.

Chapter VIINeuron
2026

Neuron launches.

January: the offensive security execution platform. March: Burp Suite integration. October: pentest.ws becomes our corporate home.

Chapter VIIINext
What comes next

More products are in development, shaped the same way: from problems we hit in the field, for teams who run them on their own infrastructure.

Follow the newsroom
2017Scroll or use the arrowsToday
03 / What we believe

We know the job, because we have done it.

Every feature started as a problem we hit on a real engagement. We design around the work as it happens: scoping, testing, QA, the report and the retest.

Principles
01

Built by practitioners.

Built for operators first, by people who have run the engagement themselves.

02

The report is the product.

Findings library, multi-stage QA and private AI drafting, because the deliverable is what your client pays for.

03

Sovereign by design.

On-premises, private cloud or air-gapped. Even the AI. We never hold your engagement data.

04

Engineered for scale.

From a single operator to global programs, with tens of thousands of hosts per engagement.

04 / Platform

From scope to retest,
in one system.

Neuron is the offensive security execution platform. Plan, execute, review and deliver every engagement in one place, on infrastructure you own.
Explore Neuron (opens in a new tab)

Neuron engagement overview
Neuron / Engagement overviewSelf-hosted. Shown on a private instance.
Capabilities
  • Engagement management
  • Scheduling
  • Assets & credentials
  • Findings library
  • Playbooks & checklists
  • Private AI reporting
  • Multi-stage QA
  • Retests
  • Delivery Portal
  • AD & Entra attack paths
  • REST API & ServiceNow
  • Burp Suite extension
05 / How we build

Built around the engagement.
Stage by stage.

A real engagement has five stages. We have run every one of them, so the software follows the same order the work does.

01

Scope

Engagements, schedules, assets and credentials, set up the way a lead actually scopes a test.

02

Test

Playbooks, checklists and AD and Entra attack paths, kept beside the operator while the work happens.

03

Review

A multi-stage QA pipeline, because every finding should be checked before a client reads it.

04

Report

A findings library and private AI drafting on your hardware, because the report is the deliverable.

05

Retest

Retests tracked against the original findings, so closing the loop is part of the engagement.

One workflow, scoping to retestDeployed on your infrastructure
06 / Who we build for

For the teams that test
the world's defenses.

08 / Contact

Request a private briefing.

Tell us about your team and environment. We will show you Neuron running the way you would run it: on your infrastructure, under your control.

01We reply within one business day

A person on our team, not an autoresponder.

02A 15-minute call

Your team, your environment, your constraints.

03A private demo on your terms

Neuron shown the way you would deploy it.

We respond within one business day. We never share your details. Submitting opens your email app with the details filled in.