ABOUT US

A small team,
on purpose.

Auditon is a managed vulnerability scanning service from Sofia, Bulgaria. We built it for teams that need recurring scanning and audit evidence, but do not have the people to run scanners, or the budget for an enterprise DAST licence.

Who runs it

Pavlin Penev

Founder

Senior infrastructure and network engineer with more than 20 years of experience building and running production systems. Pavlin designed Auditon's platform and runs its operations, from scoping and scan configuration to the infrastructure your data lives on.

Why Auditon

The scanning tools are open: ZAP, Nuclei, Nmap, testssl and others. What small teams lack is the time to run them well, week after week. The work is in scoping, tuning, removing duplicates and noise, tracking what changed between scans, and keeping a record an auditor will accept. That is what we do, so your engineers can spend their time on fixes.

Run by us, on your schedule. Daily to quarterly, within the windows you agree.
One place to work from. Findings with fixes, drift between scans, time to fix, and downloadable reports in the client portal.
Honest about limits. Every report shows what was and was not covered, and why.

How we work

Our infrastructure runs in Sofia, inside the EU, and we keep each client's data separate. We only scan systems a client has verified it controls. We are building our ISO/IEC 27001 information security management system. The details, for your vendor review, are on our Trust & Security page.

Company

Auditon Labs Ltd (ЕООД), based in Sofia, Bulgaria
Registered address: 3 Reznyovete Str., Boyana district, Sofia, Bulgaria
Email: [email protected]