Penetration Testing
Simulations of real-world hacking and exploitation to test cybersecurity defenses and response
The only real test is someone trying
Our Penetration Testing service simulates real-world attack against your defenses in a safe, controlled environment, and reports what somebody could actually reach. There are four options, each meeting different compliance and testing requirements, and our experts will advise on which fits what you need to prove.
Penetration Testing overview (PDF)Benefits
- Improved resilience
- Improved peace of mind
- Improved regulatory compliance
Features
We perform penetration testing of your cybersecurity defenses and response.
- Live simulation of real-world hacking in a safe, controlled, targeted environment
- Comprehensive identification of exploitable vulnerabilities in all internet-facing systems
- Deep analysis of common application coding vulnerabilities, as defined by the OWASP Top 10
How often should we test?
Annually is the usual answer, and sooner whenever something material changes: a new application, a significant network change, a move to a new provider. Some rules and some customers set the interval for you.
Which type of test do we need?
It depends on what is being asked of you and what you are trying to learn. We work that out with you rather than pointing you at the largest option, because a test aimed at the wrong thing is an expensive way to feel reassured.
Is it safe to run against systems we depend on?
Yes. It is a realistic simulation run in a controlled environment, scoped and scheduled with you in advance. The point is to find what somebody could actually reach, not to find out what breaks.
What is the difference between a penetration test and a vulnerability scan?
A scan checks for known weaknesses and gives you a list. A penetration test puts a person on it, trying to use those weaknesses the way an attacker would. The scan tells you what is exposed. The test tells you how far someone could get. Most smaller businesses choose Vulnerability Management, which scans continuously, and Penetration Testing once a year.
Tell us about your business.
A half-hour conversation about what you're being asked for and where you actually stand. If we can help, you'll have a proposal usually within a day.
Not ready to talk? Check your readiness in five minutes and see where to start.