Case 03 of 04 · not public
Pentest Plus
What the problem was
The Certified Ethical Hacker syllabus gets studied in the gaps — on a break, in transit, standing somewhere with one bar of signal. A study tool that needs the network is a study tool that is missing exactly when the time to study appears.
Solving that with a native app means a store account, a review queue and a build per platform, for one person studying on one phone.
What was decided, and why that
A PWA. Installed from a URL, offline from the first load.
Instead ofThe alternative was a native build and two store submissions. The same interface, two build targets, and a release cycle measured in review queues rather than in pushes.
What it costsOffline-first has to be designed in at the start rather than retrofitted, and it limits what the interface is allowed to assume is available. That limit is the whole point.
What was built
React · PWA
React, built and deployed as a PWA with offline support, written alongside the Certified Ethical Hacker syllabus it holds.
What it proves about STROOM
STROOM ships the offline case — the case most projects declare done and never open again.
Pentest Plus is used by its author, on the syllabus it was built for. Offline support here is not a checkbox in a build config; it is the reason the thing exists, and it fails visibly the moment it stops working.
Two of the seven parts on this page are about what it does not show
Limits — what it does not prove
It is a study interface. It is not a security service, and the certification is not held yet.
- Study, not certification
- Sitting the Certified Ethical Hacker syllabus is study in progress. It is not a certification held, and it is not an engagement delivered for anyone.
- Not a security product
- Pentest Plus renders material about security. It does not test, harden or audit a system, and nothing on this page should be read as STROOM offering to.
Withheld — and the specific reason
Held until content rights are confirmed
The screens carry syllabus material STROOM did not write. Publishing a screenshot publishes the text inside it, and the right to republish that text is not yet confirmed. A blurred screenshot would be worse — a picture of something being hidden is still a picture of nothing.