Can Revelion test internal networks, not just internet-facing applications?

Yes. Revelion supports VPN tunnelling so the AI agents can reach internal applications, APIs, and services that are not exposed to the public internet. This lets IT teams test their internal attack surface with the same depth as external testing.

How does Revelion help with patch validation?

After deploying a patch, you can immediately run a targeted scan on the affected component to confirm the vulnerability is no longer exploitable. You don't need to wait for your next annual engagement or book a consultant. The test runs in hours and gives you documented evidence that the fix worked.

We already have an annual pentest. Why do we need Revelion?

An annual pentest gives you a point-in-time snapshot. Everything that changes after that snapshot - new features, updated dependencies, reconfigured services - is untested until next year. Revelion fills the 364-day gap between engagements, letting you test every significant change as it happens rather than discovering vulnerabilities 11 months later.

Solutions

Run Pentests Between Engagements, No Hire Needed

On-demand testing for patch validation, internal networks, and continuous compliance. Results in hours, not weeks.

Request access Get a demo

What you get

Test internal networks via VPN tunnelling, not just external surfaces
Validate patches immediately after deployment, before the next scheduled engagement
On-demand testing means no 6-week wait for a consultant to be available
Continuous compliance evidence between annual audit cycles
5 scheduled scans per month for automated, recurring coverage
CVSS 3.1 scores reflect real exploitability in your specific environment

Revelion for IT teams is an AI penetration testing platform designed for in-house IT professionals who need security testing capabilities without the budget or headcount for a dedicated security team. MSP Basic gives IT teams 100,000 monthly credits, up to 5 clients, a client portal, and limited schedules.

Most IT teams rely on an annual third-party pentest to satisfy compliance requirements and understand their security posture. That engagement covers the state of the system on one specific day each year. Everything that changes in the other 364 days goes untested.

The 364-Day Blind Spot

Between annual engagements, IT teams deploy new features, update dependencies, reconfigure services, add integrations, and onboard new software. Every one of those changes is a potential new attack surface. Without the ability to test changes as they happen, vulnerabilities accumulate undetected until the next scheduled engagement.

Revelion closes that gap. When a developer deploys a new API endpoint, the IT team can run a targeted test the same day. When a patch is applied for a known vulnerability, Revelion confirms it's no longer exploitable with documented proof. The annual engagement becomes a comprehensive audit rather than the only security assessment of the year.

VPN Tunnelling for Internal Networks

Most automated security tools test only what's exposed to the internet. Revelion supports VPN tunnelling, which means the AI agents can reach internal applications, databases, APIs, and services that live behind your firewall. Internal tools, admin portals, staging environments, and internal APIs all fall within testing scope when you connect through a VPN tunnel.

For IT teams managing hybrid environments - some services on-prem, some cloud-hosted - this means a single platform covers your entire attack surface rather than only the externally-visible portion.

Patch Validation That Actually Validates

When a critical vulnerability is disclosed and you apply the vendor's patch, how do you know it worked? Vendor patches occasionally fail to fully remediate the issue. Misconfigurations during patching can leave systems vulnerable in different ways. Without testing after patching, you have confidence based on assumption rather than evidence.

With Revelion, patch validation is a 30-minute task rather than a scheduling challenge. Point the test at the patched component, set the scope to the relevant vulnerability class, and run it. The result is documented evidence that the finding is resolved, or immediate confirmation that follow-up is needed.

Continuous Compliance Between Audits

Compliance frameworks increasingly expect continuous monitoring and testing rather than annual point-in-time assessments. With limited schedules on MSP Basic, IT teams can maintain a recurring evidence trail that demonstrates ongoing testing discipline, not just annual snapshots.

Reports map automatically to 9 compliance frameworks. SOC 2, ISO 27001, Cyber Essentials, PCI DSS, and HIPAA mappings are generated alongside every set of findings, so you are always building audit-ready evidence rather than scrambling to produce it at assessment time.

Questions

Common questions

Can Revelion test internal networks, not just internet-facing applications?: Yes. Revelion supports VPN tunnelling so the AI agents can reach internal applications, APIs, and services that are not exposed to the public internet. This lets IT teams test their internal attack surface with the same depth as external testing.
How does Revelion help with patch validation?: After deploying a patch, you can immediately run a targeted scan on the affected component to confirm the vulnerability is no longer exploitable. You don't need to wait for your next annual engagement or book a consultant. The test runs in hours and gives you documented evidence that the fix worked.
We already have an annual pentest. Why do we need Revelion?: An annual pentest gives you a point-in-time snapshot. Everything that changes after that snapshot - new features, updated dependencies, reconfigured services - is untested until next year. Revelion fills the 364-day gap between engagements, letting you test every significant change as it happens rather than discovering vulnerabilities 11 months later.

Find out what an attacker would reach first.

Request access