At Pentagull, security isn’t just a box we tick — it’s a responsibility we carry on behalf of every council, team, and organisation that trusts our software to support their essential services. As our platforms continue to evolve, so does our commitment to keeping them safe, resilient, and transparent.

That’s why, for several years now, we’ve partnered with OnSecurity to conduct our annual penetration testing. Their recent case study about our work together highlights their approach, but we also wanted to share our side of the story — and why this partnership matters so much to us.

Security Built Into How We Work

Every year, we undertake comprehensive penetration testing across our products. It’s an essential milestone in our security calendar and something our customers rightly expect from a provider handling sensitive, high-impact workflows.

Working with OnSecurity has strengthened this approach in several ways:

• Clear, accessible planning
• Their platform-first model lets us scope, plan, and schedule tests with complete clarity. Fast quoting and transparent pricing enable us to focus on security outcomes, not administration.
• Real-time visibility of test findings
• One of the most significant benefits for our development and product teams is being able to see issues as they’re discovered. This allows us to begin remediation immediately and often complete fixes before testing has even finished.
• Unlimited retesting
• Once changes are made, we can verify every fix without worrying about additional fees or delays. This is a massive enabler for quality and peace of mind.

A Collaborative Partnership, Not a Transaction

Security is a shared responsibility, and our experience with OnSecurity has always felt collaborative.

Their testers take time to understand the logic behind our systems rather than simply running automated scans. The detailed reports — complete with evidence, reproduction steps, and clear explanations — enable our teams to act quickly and accurately.

We also appreciate their responsiveness. When we’ve provided feedback, especially around platform accessibility, OnSecurity has listened and delivered improvements rapidly. That openness and willingness to adapt mirrors our own values and makes them a genuinely trusted partner.

Supporting Transparency With Our Customers

Many of our customers, particularly in the public sector, expect clarity about how we manage security. Thanks to the depth and structure of OnSecurity’s reporting, we’re able to share insights from our annual tests to demonstrate:

• Our ongoing investment in cybersecurity
• How we remediate findings
• How we continuously build security into our development lifecycle

This transparency helps build confidence and reinforces that Pentagull takes security seriously — not just in words, but in practice.

Security for Today and Tomorrow

Our penetration testing is now a well-integrated part of our development cycle. Findings are tracked internally through our ticketing system, reviewed as standard, and deployed as part of our regular release schedule. This ensures that security remains a constant, ongoing priority.

Partnering with OnSecurity has helped us strengthen this process, providing us with the insight, tools, and support we need to keep our platforms robust and trustworthy.

As we continue to expand and enhance our solutions, one thing remains unchanged: Our commitment is to delivering secure, dependable software for every customer we serve.

We recently completed a case study for OnSecurity, which you can read here https://onsecurity.io/case-study/trusted-and-transparent-why-pentagull-partners-with-onsecurity-for-annual-penetration-testing/