Scrut Strengthens the Foundation Behind Security-First GRC With CREST Penetration Testing Accreditation

Posted by Jordan Healy on 26 October 2026

Scrut Strengthens the Foundation Behind Security-First GRC With CREST Penetration Testing Accreditation

MILPITAS, CA. 26/10/2026 — Scrut Automation offers an AI platform powered by autonomous agents that operationalize continuous compliance and security. Today, the company announced that it has achieved CREST (International) accreditation for Penetration Testing, adding to its existing Vulnerability Assessment accreditation, held since 2024.

Founders of Scrut Automation – Aayush Ghosh Choudhury, Jayesh Gadewar and Kush Kaushik.

Extending the foundation for security testing

Security testing is only useful when teams can trust what the testing tells them.

CREST accreditation provides independent assurance around the capability behind security testing, assessing testing methodology, professional competence, business process, data protection, and service delivery against a defined standard.

By extending its accreditation to Penetration Testing, Scrut strengthens its capabilities across two important areas of security testing and reinforces its broader approach to security-first GRC.

“We’ve always believed compliance should be built on real security, not the other way around. Extending our CREST accreditation from Vulnerability Assessment to Penetration Testing strengthens the foundation our customers rely on. Scrut connects what happens next, so a finding moves from risk to remediation to audit-ready evidence in one place.”
– Aayush Ghosh Choudhury, Co-Founder & CEO

From finding a risk to doing something about it

A security finding is only the beginning of the work.

Once a vulnerability is identified, teams still need to understand the risk, prioritize what needs attention, remediate the issue, retest where appropriate, and maintain the evidence needed to demonstrate their security posture.

That gap — between finding and fixed — is what Scrut’s Agentic GRC platform was built to close. Security testing, compliance automation, risk workflows, continuous monitoring, and AI-powered evidence collection in one connected environment, so a finding tracks straight through to remediation and audit-ready proof without leaving the platform.

The CREST Penetration Testing accreditation is another step in that evolution, strengthening the security testing capabilities behind it.

About Scrut Automation

Scrut Automation offers an AI platform powered by autonomous agents that operationalize continuous compliance and security. The platform replaces audit chaos with scalable execution, enabling growing businesses to build trust at scale and manage cyber risk effectively.

Scrut supports more than 2,500 customers across 65+ countries and more than 70 compliance frameworks.

About CREST (International)

CREST (International) is a global not-for-profit organisation dedicated to raising standards and building trust in the cybersecurity profession.

Established in the UK in 2006, CREST (International) works with its international community of Member companies and practitioners to promote excellence, integrity and professional development across the cyber ecosystem. Through robust standards, accreditation frameworks and skills pathways, CREST (International) helps organisations buy cybersecurity services with confidence and supports practitioners in developing trusted, globally-recognised careers.

Working closely with governments, regulators and industry stakeholders, CREST (International) plays an active role in shaping policy, strengthening market confidence, and supporting the growth of a resilient, professional cybersecurity sector worldwide.

Scrut Strengthens the Foundation Behind Security-First GRC With CREST Penetration Testing Accreditation

Extending the foundation for security testing

From finding a risk to doing something about it

About Scrut Automation

About CREST (International)

You may be interested in reading this...