Grey Wing Security partners with Magellan Security Solutions for penetration testing

Grey Wing Security has partnered with Magellan Security Solutions to deliver penetration testing to Grey Wing clients.

Every SOC 2 audit ends with the same question: who ran your last penetration test. Before this partnership, we'd point clients to a vendor and lose visibility into the report until it was already in front of an auditor. Now we scope the test with Magellan directly, and the findings land in the same remediation tracker we use for the rest of the audit.

— Damian Coln, CEO, Grey Wing Security

What changes

A SOC 2 audit, an ISO 27001 audit, or a customer security questionnaire will often ask for a penetration test report. Under this partnership, Grey Wing scopes the engagement directly with Magellan as part of an existing advisory engagement.

Magellan runs the test using its own methodology: asset inventory, threat modeling against the client's environment, and exploitation attempts to validate identified risks. Grey Wing turns the resulting report into a remediation plan and tracks each finding to close, the same process it already uses for questionnaire responses and audit evidence.

Why Magellan

Magellan's team has extensive experience with companies like Autodesk, Zendesk, Sift, BlueVoyant, Patreon, and Blockdaemon. Grey Wing picked Magellan for penetration testing because that background covers the SaaS, fintech, and infrastructure environments most of its own clients run.

How to get started

Clients working with Grey Wing on SOC 2 or ISO 27001 readiness can request a penetration test through their current point of contact. New clients can book a discovery call and ask about the Magellan partnership.