Services
Penetration Testing
Hands-on testing of your applications, networks and infrastructure by security professionals, so you find the weaknesses before an attacker does.
- Area
- Security Services
- Engagement
- 4 stages
- Covers
- Pentest, Social engineering, Black-box
Testing the way an attacker would
Scanners report what looks wrong. A penetration test shows what an attacker can actually do with it.
Between tests
A penetration test is a point in time. Vulnara, our security scanning product, runs continuously in your pipeline: code, dependencies, networks and running web applications, with reports and a security score. It is not a penetration test and does not replace one, but it catches much of what changes between tests. We also build Mara, a Windows-based penetration testing distribution designed for corporate security assessments and compliance testing.
What you get
What the engagement leaves you with.
Black-box, grey-box and white-box testing, chosen for what you need to learn
Network, application and infrastructure testing
Social-engineering drills against the people and processes in scope
Public-leakage scans for exposed credentials and data
Findings ranked by risk, with a remediation plan and a debrief
Engagement
How the engagement works
Scoping: the systems, test type and rules of engagement, agreed in writing
Testing: hands-on work against the agreed scope
Reporting: findings ranked by risk, with evidence and remediation advice
Debrief: a walk-through with the testers and your team
Frequently asked questions
What is the difference between black-box, grey-box and white-box testing?
Black-box testers start with no inside knowledge, like an outside attacker. Grey-box testers get the access a normal user has. White-box testers get documentation and, where relevant, source code, which finds more in the same effort. We help you pick the type that fits what you want to learn.
How long does a penetration test take?
It depends on scope and complexity. We agree a dated plan with you before testing starts, including the report and debrief.
Is automated scanning enough?
Scanning finds known issues quickly and is worth running all the time. A penetration test adds a person who chains findings together, tests business logic and tries what a scanner cannot.
Case Studies
Related services
Plan a penetration test
Book a free consultation. Tell us what you want tested and we will propose a scope and test type.