Why choose DongIT as your pentest partner?

DongIT has been specialized in penetration testing since 2012 for organizations that need demonstrable security. Five concrete assurances distinguish DongIT from other pentest providers.

1. CCV Keurmerk Pentesten and ISO 27001 certified

DongIT is certified under the CCV Keurmerk Pentesten, the Dutch national standard for high-quality penetration testing issued by the Centre for Crime Prevention and Safety. Additionally, DongIT itself has been ISO 27001-certified since 2025 per ISO/IEC 27001:2022. Our own information security management system is independently audited, so we know first-hand what external auditors expect from your organization.

2. Manual testing by OSCP-certified experts

Our pentesters hold OSCP, OSWE, OSEP, OSED, CRTO, CISSP and CISA certifications. Every pentest is performed manually, with automated tools only as an initial supporting step. This makes the difference when finding business logic flaws, IDOR patterns, multi-tenant leakage and creative exploit chains that scanners systematically miss.

3. Four-eyes principle with peer review

Every finding is reviewed by a second senior ethical hacker. This peer review filters false positives, verifies exploitability and ensures the report is directly usable for your auditor or development team. This is standard on all DongIT pentests, not only on the more expensive packages.

4. Development and security expertise under one roof

DongIT started as a web development company with a strong focus on security by design. Our pentesters have hands-on development experience and work daily with tech stacks including Node.js, .NET, Java, React, Kubernetes and cloud-native architectures (Azure, AWS, GCP). Our findings come not only with risk assessments, but also with concrete remediation guidance your team can apply directly.

5. Security Reporter: reporting through our own platform

Our reports are delivered through the DongIT-developed Security Reporter platform. Interactive findings, exports to PDF, CSV and HTML, integration with your development tools and support for team collaboration. A concrete advantage for your development team compared to static PDF reports that quickly become outdated.

Want to know how DongIT can concretely strengthen your security? Contact us for a complimentary scoping conversation.