Pentest Slack Channel

Introduction

You have a dedicated Slack channel for each pentest. That’s an integral part of the experience, as it:

• Supports interactions with our pentesters (architect, lead, individual pentesters)
• Allows regular updates on your pentests

While our pentesters include all vulnerabilities in the platform, they’ll highlight critical vulnerabilities in the Slack channel.

How It Works

We create your dedicated Slack channel as soon as the pentest is moved to “In Review” state. When available, you’ll see a Slack icon in the pentest brief:

When your Slack channel is available:

• You add the employees of your choice, using their email addresses.
  • Name and ID of the pentest.
  • Email addresses of the employees to add to the channel.
  • If you have a Customer Success Manager (CSM), they’ll add your selected employees, please reach out to your CSM.
  • If you do not have a CSM, click on [e-mail] in tooltip to submit a form with the
    • Name and ID of the pentest.
    • Email addresses of the employees to add to the channel.
• You may now have access to your pentesters through Slack after the pentest is moved to “Planned” state. Pentester assignments may be delayed for special requirements.
• If you’re joining Slack for the first time, read the instructions in the welcome email from Slack. Until you join slack and have access to the pentest slack channel you will see following when you click on the pentest slack channel link in the tooltip: 

Once the process is complete, anyone with access to the Cobalt app and added to the channel should be able to access the Slack channel for the pentest through the brief tooltip.

Slack After Pentest Completion

When a pentest is complete, it’s set to “Remediation”. At this time, our pentesters help you fix and re-test your changes.

You can now discuss the findings on the platform, to focus on specific findings. Once each finding is set to either:

• Accepted Risk
• Fixed

The pentest is set to "Closed", and the Slack channel is archived. If you don’t already have access to your archived channel, your Cobalt CSM or [e-mail] can help.