Building More Than a Pentesting Service

When David Marques and his team joined Logicalis Portugal, they weren't looking for another reporting platform.

They were building an entirely new offensive security service.

The ambition was bigger than delivering penetration tests. They wanted to create a modern customer experience where clients could request assessments, track vulnerabilities, collaborate with security consultants, and continuously improve their security posture from one central platform.

Rather than adapting their service to existing processes, they brought a platform they already trusted.

"When we moved to Logicalis, the first thing we did was bring in Cyver Core. We adjusted everything on the platform to the way we envisioned delivering our service."
— David Marques, Pentester, Logicalis

Today, that service has expanded beyond Portugal and is being adopted across other Logicalis regions, including the UK, Germany, and the United States.

Creating a Better Customer Experience

Traditional penetration testing often comes with operational friction.

Clients prepare Requests for Proposal, compare vendors, exchange countless emails, manage password-protected PDF reports, and lose visibility once the assessment is complete.

Logicalis wanted something different.

"Clients no longer need to go through RFPs, sales loops, or multiple proposals. They simply have credits on the platform and use them whenever they need. That simplicity is already a big win."

Cyver Core became the operational foundation of that new model.

Customers can request new assessments through standardized request forms, schedule engagements, collaborate directly with the Logicalis team, and continuously monitor their security findings without relying on disconnected documents.

According to David, simplicity became one of the biggest competitive advantages.

"The user experience is very intuitive. Even clients without much technical background can do everything they need on the platform."

Replacing Reports with Collaboration

For Logicalis, the biggest improvement wasn't simply generating better reports.

It was changing what happens after the report is delivered.

Instead of static PDF documents that quickly become outdated, every vulnerability becomes part of an ongoing conversation.

Customers can review findings, discuss remediation, request retesting, and maintain a complete history of every action taken.

"We're no longer handling PDF reports from different companies or managing passwords. Everything is on the platform."

"Clients can message us directly on a particular pentest. We go back and forth on whether something is fixed or not, and everything gets preserved. That's the key part."

Rather than delivering information once, Logicalis now delivers an ongoing security service.

Compliance Backed by Evidence

One of the most unexpected benefits appeared during compliance audits.

Logicalis also uses Cyver Core internally to track vulnerabilities discovered by their own security scanners, creating a complete audit trail of prioritization, remediation, and communication between teams.

When presenting this process during an ISO 27001 audit, the response immediately validated their approach.

"When we showed the platform to the ISO 27001 auditors, they said: 'This is amazing. This is exactly what we want to see.'"

For David, the reason was simple.

The platform doesn't just document vulnerabilities.

It documents the work performed around them.

"We actually have something to prove what we do."

Activity history, prioritization, ownership, remediation discussions, and evidence are preserved automatically, giving auditors exactly what they're looking for.

"Companies really struggle to provide evidence that they're actually doing something. The platform gives us that evidence."

Delivering More Than Pentests

As Logicalis expanded its services, Cyver Core evolved into much more than a penetration testing platform.

Today, it supports vulnerability management, continuous monitoring, and collaboration between offensive and defensive security teams.

One example perfectly illustrates this value.

Logicalis continuously scans customer-facing infrastructure and imports discoveries directly into Cyver Core.

During one of those scans, the team discovered an exposed pre-production server running a vulnerable version of Apache, with widely available exploits.

The customer wasn't even aware the infrastructure existed.

"We found a vulnerable pre-production server that the client didn't even know was publicly exposed."

The team immediately contacted the customer before the system could be promoted into production.

"The client said, 'I didn't even know this infrastructure existed.' They were incredibly happy that we caught it before it became a real problem."

Instead of reacting after an incident, Logicalis helped prevent one.

Winning Customer Confidence

The impact became visible almost immediately.

Customers embraced the new workflow.

Instead of receiving another report, they gained visibility into their security posture, collaboration with the security team, and a simpler way to manage ongoing assessments.

Some customers committed far beyond a single engagement.

"Today we have customers with three-year agreements. They saw the value of the platform, the simplicity of the workflow, and having all vulnerabilities in one place with compliance insights. They chose to invest in the service long term."

Perhaps the most surprising transformation happened inside Logicalis itself.

"Even our sales team didn't believe we could deliver all this at first."

As customers started using the platform and sharing positive feedback, perceptions quickly changed.

"When they saw how clients were using the platform and the feedback we were getting, everything changed. They immediately started looking for new opportunities."

The platform wasn't only convincing customers.

It was convincing the business.

Looking Ahead

Logicalis continues expanding the way it uses Cyver Core.

Beyond penetration testing, the platform is now becoming the central workspace connecting vulnerability management, SOC operations, threat intelligence, and purple team collaboration.

For David, that's only the beginning.

The more the platform becomes integrated into security operations, the more value it creates for both consultants and customers.

Key Outcomes

Using Cyver Core, Logicalis has been able to:

• Build and launch a modern pentesting service across multiple geographies.
• Simplify customer engagement through self-service requests and credit-based assessments.
• Replace static reports with collaborative vulnerability management.
• Strengthen compliance with auditable evidence and complete activity history.
• Detect and remediate vulnerabilities before they became production incidents.
• Expand security services across Pentesting, Vulnerability Management, SOC, and Purple Team operations.
• Secure long-term customer commitments through an improved service experience.