News By Tag Industry News News By Place Country(s) Industry News
| ![]() C360RED Launches CAIT: Continuous, Human-Assured Penetration Testing From £250 a MonthNew subscription service replaces the annual penetration test with always-on, human-reviewed security testing built for SMEs
By: Custodian360 Most small and medium-sized businesses currently rely on a single annual penetration test to satisfy compliance requirements and manage cyber risk — a model built for a slower era of software development. With applications now shipping changes weekly or even daily, an annual test can leave organisations working from a security picture that is months out of date almost as soon as it's delivered. CAIT addresses this by testing applications continuously rather than periodically. Every finding is reviewed by an OSCP-qualified security practitioner before being reported, and subscribers choose their own reporting cadence — daily, weekly, monthly, or annually — with the option to change it at any time. Findings are mapped directly to major compliance frameworks, including ISO 27001, SOC 2, Cyber Essentials Plus, PCI DSS, and NIST CSF. The launch comes as regulatory frameworks including PCI DSS v4.0, the EU's Digital Operational Resilience Act (DORA), and the NIS2 Directive increasingly push organisations toward continuous security assurance rather than point-in-time compliance. The global market for penetration- Unlike traditional penetration testing engagements, which typically require a scoping call and a custom quote, CAIT is priced transparently and available on a self-serve basis: £250 per month per application, or £2,700 per year with an approximate 10% saving for annual payment. "Traditional penetration testing gives you a snapshot of one day a year," said Andy James, Managing Director of C360RED. "Everything that happens afterward — every code change, every new integration — goes untested until the next scheduled engagement. CAIT was built to close that gap, without the enterprise price tag that's kept continuous testing out of reach for most SMEs." CAIT is available now at cait.c360red.com. ### About C360RED C360RED is a UK-based offensive security company providing penetration testing, red teaming, and continuous security assurance services. The company's team is CREST- and OSCP-certified, combining decades of hands-on security experience with a commitment to clear, jargon-free reporting. C360RED's sister brand, Custodian360, provides defensive and managed security services. For more information, visit c360red.com. End
| ||||||||||||||||||||||||||||||||||||||||||