The platform
Everything you need to see what’s exposed on your network — and fix it.
EthicalStrike combines a lightweight sensor, automated internal and external testing, and compliance-mapped reporting in one portal, so every assessment is repeatable, scoped and audit-ready. Built and run by Approved Systems.
Internal network testing
Discovery, service and vulnerability scanning and SMB enumeration run from inside the network by the sensor, so you see what an attacker with a foothold would find.
External attack-surface testing
Assess internet-facing assets after proving ownership by DNS TXT record or written authorisation. Testing never starts against a target you have not verified.
Scheduled and continuous
Run an engagement once, on a recurring schedule, or continuously. Each run records its scope and authorisation reference so results are defensible.
Compliance-mapped reporting
Executive summary and technical report for every engagement, with findings mapped to CREST, ISO 27001, SOC 2, GDPR and HIPAA, not just attacker techniques.
Multi-tenant by design
Operate every client from one portal with strict tenant isolation. Owners and analysts manage engagements; client users see only their own organisation, read-only.
Secure by default
Authorisation-gated scanning, encrypted transport, hashed credentials and per-tenant data isolation. Reports are download-only from the portal, never emailed as links.