Your test, visible while it is running.
Every JAG Secure engagement runs through a client portal dedicated to our clients. Findings appear as they are confirmed. The report is released into it rather than emailed. Every test you have had with us stays there for the next one.
What you see during a JAG Secure test
Sign in without a password
A passkey or a one time code sent to your email address. There is no password to set, share or lose, for you or for us.
One home for the engagement
The scope, the test dates, your contacts and any credentials you supplied live with the project. Nothing sits in an email thread. Anything sensitive is held in a vault that records who looked at it.
A delivery timeline you can check yourself
The project carries its own timeline, so you can see where the test is without asking. You see your own history and nothing of ours.
Findings as they are confirmed
Each finding is published to you once it has been verified, with its severity, the evidence and what to do about it. You are not waiting for a report to learn what was found.
A channel to your tester
Every project has a conversation thread between you and the person doing the work, kept separate from anything internal to us. Questions about a finding go to the person who found it.
The report, released rather than emailed
When the report is approved it is released into the portal as a PDF. The release is recorded, so the report you hold is the report we issued.
Respond to findings and request retests
You mark what you have fixed, add a note if you need to and request the retest from the same screen. The retest result is recorded against the finding, not in a second document you have to reconcile.
Your history, kept
Every test we have done for you stays in the portal. Next year’s test starts from last year’s findings, which is the point at which annual testing starts to mean something.
See it before you book
We walk you through the portal on a 20 minute call using invented data, so you can see what your own test would look like from the client side before you commit to anything.
- Which test you are considering
- Who from your side should be on the call
- A couple of dates that suit
Prefer to talk first? Edinburgh 0131 605 6703, London 020 3051 8897.
What changes when you can see the test
Fixes start on day one
A Critical finding confirmed on the first morning is in front of your engineers that afternoon. Your team can start fixing before the report is written.
No surprises at the debrief
By the time we walk through the report, you have read every finding and asked your questions in the thread. The debrief is about priorities, not revelations.
One record, not a folder of PDFs
Findings, responses, retests and reports for every test sit in one place. When an insurer or a customer asks what you fixed and when, the answer is already there.
The next test is a login away
Scope, contacts and history are already in the portal, so booking the next test is a conversation rather than a procurement exercise.
Built to the standard we test against
The portal is a dedicated instance for JAG Secure clients, hosted in the UK, with its own server, storage and encryption keys. Nothing is shared with any other organisation. Findings, evidence, credentials, messages and reports are encrypted at rest. Access to anything sensitive is audited. Encrypted backups are taken nightly.
There are no passwords anywhere in it, for you or for us. Sign in is by passkey or a short lived code sent to your email address, which means there is no password database to lose.
Frequently Asked Questions
Do we need to install anything?
No. The portal runs in a browser. You sign in with a passkey or a one time code sent to your email address, so there is no password to create or lose.
Who in our organisation can have access?
Anyone you name. Access is per person, so the people fixing findings can see the detail without sharing a login. You can add or remove people at any point.
Is the report still a document?
Yes. The report is released into the portal as a PDF, so you can download it for an insurer, a customer or an auditor in whichever form they want.
Does the portal replace the debrief call?
No. The debrief still happens. The difference is that by the time it does, you have already seen every finding and usually started on the ones that matter.
Can we see it before we book?
Yes. We walk you through it on a short call using invented data, so you can see what your own test would look like from the client side before you commit to anything.
Three fixed price packages, all delivered through the portal
External, external and web, or external, web and internal, with the scope limits printed beside the price. You know the number before the scoping call.
See the Packages