AccessGranted Continuous

A pentest that never stops. And every month, a pentester who walks through it with you.

AccessGranted Continuous tests your attack surface every month with real exploit attempts, automatically re-checks fixed findings in the next cycle and discusses the results with you in person.

  • Real exploits, not signature matching
  • Re-tests in every cycle
  • Monthly review meeting
One year of Continuous
1 2 3 4 5 6 7 8 9 10 11 12 Certificate 12 test cycles a year
  • Automated test cycle with exploit attempts
  • Review meeting with your pentester
  • Annual certificate

What happens in every cycle

  1. 1

    Exploit attempts

    Against your externally reachable systems. The platform attempts the attack instead of only reporting a version number.

  2. 2

    Privilege escalation

    Paths in the internal network and in Active Directory, documented up to the evidence of how far an attacker would get.

  3. 3

    Re-test

    Every open finding from the last cycle is checked again. No extra quote, no re-commissioning.

  4. 4

    Review meeting

    Your pentester puts the results in context for your organisation, prioritises with you and answers questions in conversation.

Status, findings and history live at any time in app.access-granted.de

External endpoints are tested every month. The cadence for internal exploit runs, for example in Active Directory, is agreed with you during the scoping call.

Annual pentest or Continuous?

Classic annual pentest AccessGranted Continuous
Test frequency1× a year, in full depth12× a year, automated
Re-testsOn request, as a separate projectIncluded, every cycle
Results discussionPDF report by emailMonthly meeting with your pentester
Test depthFull assessment on the agreed dateExploit and privilege escalation, fresh every month
Attack surfaceIn the report at project closeLive on app.access-granted.de

A classic annual pentest is an in-depth assessment at a fixed point in time and exactly right for many requirements. Continuous spreads that depth across the whole year: as an add-on to it, or as an entry point while the big test has to wait.

Always included

  • Real exploits and privilege escalation, not just a scan

  • Re-tests in every cycle, at no extra cost

  • Monthly review meeting with your pentester

  • Live access to app.access-granted.de

  • Once a year, a certificate confirming the pentest period completed without interruption

Scan or pentest?

A pentest. A vulnerability scanner matches signatures and writes CVE numbers into a list. Whether the flaw is actually exploitable in your environment stays open. Our platform goes one step further.

Vulnerability scanner

  1. Version detected
  2. CVE numbers looked up
  3. List written

Exploitable? Unknown.

AccessGranted Continuous

  1. Exploit attempted
  2. Access verified
  3. Privilege escalation tested
  4. Evidence documented

Exploitable? Answered.

Optional: Attack Surface Management

ASM automatically checks what is visible from the outside and adds the outside view between cycles to complement the exploit tests.

Attack surface
Subdomains, open ports and the services running on them are recorded, including the ones nobody remembers are still online.
Early warning
Expiring certificates, exposed configuration files, API keys forgotten in the code and domains that look confusingly similar to your own.
Cadence
Automatic, once a week per domain.
Bookable
As an add-on to Continuous or entirely on its own, with no external or internal endpoints at all.

The pricing model

The price is based on the number of your external and internal endpoints as well as the ASM domains you have booked. On top of that comes a service fee covering the platform, reporting and the monthly review meeting. Longer contract terms (3 or 5 years instead of 1) reduce the monthly rate. For internal endpoints, a one-time setup fee is charged. You can work out the current price yourself, online and in real time.

Price calculator: access-granted.de/en/continuous-pentest

How do we start?

1

Scoping call

Test scope, systems and framework conditions: 30 minutes that make everything that follows plannable.

2

Setup and approvals

Setting up access and approvals for the automated testing platform.

3

First test cycle

A complete baseline test, with a report and a joint initial discussion.

From here: every month

Automated tests, re-tests, review meeting. Once a year, the certificate.

Annual pentest, Continuous or both?

No budget for the big pentest, or in the middle of a rebuild? Then start with Continuous. In a free, no-obligation first call we look at whether it fits you as an add-on or as an entry point.

Book a first call

Book online: access-granted.de/en/booking/kennenlerntermin

More on Continuous: access-granted.de/en/continuous-pentest

hello@access-granted.de
+49 9281 5918506
access-granted.de/en/contact

Contact

Address
Albert-Einstein-Straße 1, 95028 Hof
E-Mail
hello@access-granted.de
Phone
+49 9281 5918506

AccessGranted X GmbH · HRB 7266 · Hof (Saale)

Company

Services

Regulatory pentests

Industries

© AccessGranted X GmbH Last updated: September 29, 2026