Frequently asked questions
What is Venstap?
Venstap is a unified vulnerability assessment and penetration testing (VAPT) platform that combines automated scanning (nmap, nuclei), manual pentest workflow, findings triage, compliance mapping, and audit-ready reporting in one console.
Do I need my own scan engine infrastructure?
No — Venstap orchestrates nmap and nuclei scans directly. If a scan engine binary is unavailable on the host, Venstap returns a clearly-labeled simulated result rather than failing silently.
Can I use Venstap alongside tools I already have, like Burp Suite?
Yes. Many teams use Venstap as the system of record for findings discovered by any tool, including manual testing done in Burp Suite. Findings can be logged manually and triaged alongside automated scan results.
What roles are available for my team?
Venstap has a three-tier role hierarchy: Admin (manage users/roles, delete assets, view audit log), Analyst (create/edit assets, run scans, triage findings), and Viewer (read-only access).
How does compliance mapping work?
Findings and assets can be tagged against the compliance frameworks relevant to your business — SOC 2, PCI DSS, HIPAA, ISO 27001, and more — so evidence exports stay organized by the framework an auditor is testing against.
Is there a mobile app?
Yes, Venstap has native iOS and Android apps for reviewing scans, triaging findings, and receiving push notifications when a scan completes.
What notification channels are supported?
Email (via your own SMTP relay), mobile push notifications, and outbound webhooks configured per asset.
Can I export a report for an auditor or customer?
Yes, Venstap generates audit-ready PDF reports directly from live findings data, scoped by asset, date range, or engagement, including a separate executive summary view.