What we offer
Vulnerability Assessment
Full Vulnerability Assessment
Network Penetration Testing
Web Application Penetration Testing
Vulnerability Assessment
A vulnerability assessment is a process that defines, identifies and classifies the vulnerabilities in a computer, network, or communications infrastructure. In addition, vulnerability assessments can forecast the effectiveness of proposed countermeasures and evaluate their actual effectiveness after they are implemented.
Full Vulnerability Assessment
During a full network vulnerability assessment, a security engineer scans the external network for known vulnerabilities and tests to rule out false positives. Social engineering tests are conducted to assess employees' adherence to information security best practices, revealing any training gaps. The assessment also includes a compliance audit to ensure adherence to regulations like GLBA, HIPAA, PCI-DSS, or ISO27001. Assessments can be conducted on-site or remotely, with on-site assessments including a physical security review. Custom professional service engagements can be tailored to specific security needs.
Network Penetration Testing
Network penetration testing elevates vulnerability testing to a simulation closely resembling real-world hacking. In this test, a security engineer or ethical hacker scans the network for vulnerabilities and exploits them to gain system access. They may then access sensitive information or, if permitted by the SOW, leave a marker to demonstrate their access. "Pivoting" is often employed in penetration tests, allowing access through non-sensitive systems within the perimeter to launch attacks on critical systems behind the firewall.
Web Application Penetration Testing
Many companies possess custom web apps developed in-house or by third parties. Typically, these apps aren't tested for security vulnerabilities prior to deployment. In a web application penetration test, a security engineer or ethical hacker endeavors to gain access to the application as an authenticated user, employing diverse methods to extract or manipulate data within the application. Conducting a web application penetration test before deploying any new applications is considered a best practice.
Benefits for your business
Confirm infrastructure security posture
Meet compliance (Requirements of GLBA, HIPAA, PCI-DSS)
Find security flaws
Validate incident response procedures
Get familiar with the process through findings on your own network
Identifying higher-risk vulnerabilities that result from a combination of lower-risk vulnerabilities exploited in a particular sequence
Assessing the magnitude of potential business and operational impacts of successful attacks
Testing the ability of network defenders to successfully detect and respond to the attacks
Providing evidence to support increased investments in security personnel and technology to C-level management, investors, and customers