Resources

Artifacts we give away.

Sample reports, templates, playbooks, and talks. Everything here is what we actually use with customers — redacted and cleaned for the public.

Sample artifact

Sample engagement report

A redacted, full-length PTaaS report showing our finding format, kill-chain narrative, and auditor-facing summary.

View sample

$ head -12 sample-report.pdf.txt

PentStark · PTaaS Engagement Report Customer: Acme (redacted) Window: 2026-01-03 → 2026-02-28 Scope: 2 apps, 3 APIs, 1 cloud Executive summary - 4 criticals, 6 highs, 12 mediums - MTTR 4.2d · 0 regressions on retest - SOC 2 evidence package attached Findings index PS-1142 CRIT BOLA /v2/orgs/:id/invoices PS-1141 CRIT AD CS ESC1 User template ...

Free artifacts

Template

Pentest RFP / SOW template

A scoping template your procurement team can send to any vendor. Sized for fintech / SaaS / healthcare / AI workloads.

RFPScoping

Template

Threat model template (STRIDE + PASTA)

A battle-tested threat model template with example abuse cases for multi-tenant SaaS, payment rails, and LLM agents.

Threat modelSTRIDE

Playbook

PTaaS onboarding playbook

What the first 30 days of a PTaaS retainer look like, week by week, with checklists.

PlaybookRetainer

Talk

LLM red teaming — real chains, real CIs

40-minute talk + slides from BlackHat Asia 2025 on chaining prompt injection with tool-use abuse.

AI/LLMTalk

Checklist

LLM app launch readiness checklist

18-item pre-launch checklist for LLM apps with tool use. Free to use, share, and adapt.

AI/LLMLaunch

Everything email-gated is sent within one business day. No newsletter auto-subscription, no CRM grooming.

Talk to an operator

Your next finding is one scoping call away.

Thirty minutes with a real operator tells us what you need and what we can deliver. No BDR handoff, no sales engineer theater — the person you talk to is the person who scopes the work.

hello@pentstark.com

Talk to an expertBook a demo

● Responses in < 1 business day