Projects: on-demand pentesting

Last updated: October 19, 2026

Projects let you run on-demand offensive security assessments (pentesting), performed by Strikers on a scope you define.

Unlike Threat Emulations, which Strike's AI agent runs continuously, Projects are designed to analyze specific scenarios at a given point in time, with a manual, targeted approach.

When to use a Project

Projects cover scenarios that fall outside continuous testing of web applications and APIs, for example:

  • Testing a mobile application. For more details, see How to test a mobile application with Projects.

  • Meeting compliance requirements that call for a manual pentest.

  • Assessing a specific system in depth.

  • Running a traditional pentest within Strike's model.

They work as a complementary layer to your Threat Emulations.

How to create a Project

From the Projects section:

  1. Create a new project.

  2. Define the scope (targets).

  3. Describe the testing goals.

  4. Upload the relevant documentation.

The Project flow

A Project moves through four stages: Scope, Quote, Test, and Results.

  1. Scope: you define the scope and targets, and click Request quote.

  2. Quote: the Strike team reviews the scope and tells you how many credits the Project will consume.

  3. Test: if you decide to move forward, Strike confirms that your organization has enough credits, assigns a Striker, and the run begins.

  4. Results: when it finishes, you can access the findings and their validation.

How consumption is calculated

Projects are paid with your organization's credits, just like the rest of the platform. The number of credits depends on:

  • The size of the system.

  • The complexity of the testing.

  • The defined goals.

If the Project was defined with your sales team before you signed up, your organization should already have credits allocated to run it.

Project dashboard

Each Project has a centralized view where you can:

  • See the defined scope.

  • Review the targets.

  • Access files and documentation.

  • Track the project status.

When the testing is complete, you can download the Project report. For more details, see How to generate and download a report.