Five systems
and one person's memory.

Every engagement runs across a CRM, a scoping spreadsheet, a scanner, a Word template, and whatever your senior consultant carries in their head. Margin leaks at every handoff — into tooling that bills by the asset, and into retests written from scratch by hand. And your real edge, the judgement that makes your reports worth the rate, walks out of the door every time someone leaves.

Catalogue to evidence,
on one rail.

The quote, the scan, the estate and the report are the same record — no exports, no re-keying, no version drift.

One platform, catalogue to evidence

It replaces the CRM, the scoping spreadsheet, the scanner, the Word template and the tribal memory with one line from service catalogue to compliance evidence. No exports between systems, no re-keying, no version drift.

Methodology becomes an asset you own

Author what counts as a finding once, in the UI, with a dry-run preview against real scan history — no code, no NASL, no vendor catalogue to wait on. Your best consultant's judgement then runs the same way on every engagement after it: repeatable, defensible, owned by the firm rather than a person.

Retest is a diff, not a rewrite

The job your team most resents doing by hand becomes an output of the platform. A persistent estate and durable finding ledger mean the follow-on starts from a known estate — new hosts, closed ports, findings resolved or returned, produced from the two scans, not assembled by hand.

Acme · External — Report v0.2 pre-QA sitrep
7 to resolve 2 placeholders 1 empty section
Fix
Finding — SQL injection · /searchNo proof of concept
Fix
Finding — Exposed .git directoryKey finding with no evidence images
Check
Finding — New FindingUnedited placeholder title
Empty
Section — Remediation summaryNo content authored
Non-blocking completeness check — fix, or submit anyway. The operator sees it before the client does.

Representative view · pre-delivery QA

Deliver under your name,
on one licence.

Multi-tenant delivery infrastructure that stops billing you for growth.

One flat licence, whole client book

Multi-tenant by organisation: one instance serves every client, isolated from one another, under a single flat unmetered licence. No per-asset or per-seat meter to price around — the cost of delivery stops scaling with the size of the estates you test.

Resell under your own brand

Every client document and report carries your name, not ours. Client data never touches a vendor cloud — it runs on your infrastructure, in your jurisdiction — so the residency and sovereignty claims you make to a regulated client are true of the platform you deliver on.

A priced, signable SoW spine

A catalogue and client-facing scoping questionnaire feed a rate card with per-service, per-client and per-line overrides, multi-currency, and whole-quote discounts and fees. The signable statement of work is a first-class document with a draft → published → accepted lifecycle — the quote that scopes the work is the object that gets signed.

Acme Corp — Statement of Work GBP · v2 · published
ServiceDaysRateAmount
External infrastructure test4£1,200£4,800
Web application assessment6£1,200£7,200
OSINT & attack surface2£1,100£2,200
Retest (diff)1£1,100£1,100
Total · 10% multi-service discount applied £13,770
Client acceptancesignature & date

Representative view · priced statement of work

Own the line
between
the bands.

A scanner owns one band. A reporting tool owns another. A GRC platform owns a third. Each competitor occupies a single stage — and you stitch the gaps by hand. Dispatch spans the whole line: catalogue → scope → priced SoW → scan → persistent estate → diff → report → framework evidence, as one continuous record.

A reporting tool starts when testing ends. Dispatch starts at the quote and keeps the estate between engagements, so the second test is a diff rather than a rewrite — and a one-off becomes a managed programme you can put a cadence and a price against.

Author findings in the UI with a live dry-run preview — no code, no vendor plugin catalogue
Good-practice findings that say what's working, not only what's broken
Deterministic & AI-free — the same scan yields the same report, and you can name the rule behind any finding
Versioned, reviewed, ledgered deliverables with operator and client scope co-attestation as chain of custody
Air-gapped self-hosted, with tarball distribution for environments that can't take an outbound anything

Resell delivery
under your own brand.

A delivery-partner arrangement puts the whole platform behind your engagements — your name on every deliverable, your whole book on one licence.

Your brand on every deliverable

Every client document and report carries your name, not ours — and client data never touches a vendor cloud, so the residency you promise a regulated client is true of the platform you deliver on.

One licence across the book

One flat, multi-tenant licence covers your entire client book, with no per-asset or per-seat meter to design your pricing around — and edition tiers you can package and price per engagement.

Deliver anywhere

Air-gapped tarball distribution reaches clients whose environments can't take an outbound anything — so you can quote the regulated and defence clients your SaaS-only rivals can't touch.

Straight about the edge: document and report branding is yours today, and everything a client sees on a deliverable already flies your banner. A fully re-skinned operator console — the sidebar chrome your own staff see — is on the roadmap, not shipped. Worth knowing before you plan a pure white-label resale.

Let's talk terms

More engagements.
Same headcount.

When scoping, scanning, retesting and reporting stop eating billable hours, the same consultant carries far more work — throughput and revenue per head, not a discount you hand to procurement. Fifteen minutes and we'll walk one engagement end to end.