Permission first, then testing
Apply as a security team
Tell us your organisation, your role and how you plan to use CitadelPen.
Show authorisation
Provide evidence that you own, or have written permission to assess, each website or network you name.
Agree on scope
Set the approved targets, testing boundaries and assessment window before any testing begins.
Review clear findings
Findings are tied to the approved scope, explained in plain language and linked to the people responsible for fixing them.
Not every application will be approved. Approved teams will only receive access after product security and release checks are complete.