A pentest ensures that a specific part of the system is tested for security vulnerabilities and the information obtained can be used to fix the security problems. There are three types of pentests: black box, gray box and white box. Code review is applied to software to see where there are security flaws and provides a clear and deep code analysis to get to the root of the problem. In principle, this comes very close to a white box pentest. The recommendation at Code Review is to do this in the development phase of the software to save time and repair costs. Securify combines a pentest with a code review and sees this as an added value for customers, because it offers more depth to the research (added value). Other security parties usually limit themselves to performing a black or gray box pentest. Securify also looks under the hood (in the code) of your application in order to identify vulnerabilities faster/better and therefore make a better recommendation to the customer.