MapperPlus

Trust and security.

ISO 27001 certified. Encrypted in transit and at rest. SSO with SAML. Only what reproduces is reported, and your team merges every fix.

Certification

MapperPlus is ISO/IEC 27001 certified. Our information security management system is audited against the standard by an independent certification body. The certificate is available on request at [email protected].

Your data

  • Encrypted in transit and at rest.
  • Deleted on request. Write to us and we remove your workspace data.

Access to MapperPlus

Single sign-on with SAML is available, so access follows your identity provider and leaves with the people who leave.

Access to your source code

You connect GitHub, GitLab, or Bitbucket with a switch in settings. MapperPlus uses that access to find the file and the line behind a finding, and to open a merge request with the fix.

MapperPlus doesMapperPlus does not
Read the code behind a finding
Merge a change
Open a merge request with the fix
Release or deploy
Name the file and the line
Change your repository settings

Every merge request is reviewed and merged by your engineers, in the review process you already run.

Proof before a finding

The autonomous pentest chains requests against the live system the way an attacker would. An issue is replayed until it reproduces. If it does not reproduce, it is not reported.

  • Each finding carries the requests that proved it.
  • Each finding names the asset, the endpoint, and the severity.
  • Researcher reports from HackerOne or Bugcrowd are reproduced the same way.

See a sample finding →

What your team controls

  • The domains in the workspace.
  • Each integration, as a switch in settings.
  • The review and merge of every fix.
  • The release.

Authorization

Add only domains and systems you own or are authorized to test. See the terms of service for details.

Security reviews

Our security overview is available as a PDF on request. Send it, or your questionnaire and vendor assessment, to [email protected], and we will answer it with your team.

Reporting an issue in MapperPlus

Found a security issue in MapperPlus? Write to [email protected] with the steps to reproduce it. Please give us time to fix it before sharing it publicly.

Bring your security questions to the demo.

Enter your domain. We map what is exposed and walk you through it in a live demo.

ISO 27001 certifiedNothing to installYour team merges every fix