Our consultants carry out penetration tests which realistically simulate the actions of a cyber attacker to identify any potential weaknesses in the integrity of your system or your applications. Penetration tests are typically executed from outside your network but we can also test from inside your network to simulate insider threats. Regular penetration testing is now an essential operational requirement for all smart businesses.
Our specialists will advise how to resolve these vulnerabilities so that you can take a proactive approach and make changes before they can be exploited.
We follow a four-step process:
PRE-ENGAGEMENT ASSESSMENT
We work with you to define the critical applications, systems, and networks to be included in the penetration testing program.
EXECUTION OF PENETRATION TEST
The hands-on interactive testing undertaken by our experienced team incorporates a wide range of attack methodologies including target profiling, target enumeration, hands-on manual testing, intelligent exploit attacks and application analysis of business logic.
Our team of experts uses a concept called “Purple Teaming” with a combination of both ‘red’ and ‘blue’ teams to share intelligence data and to ensure all attack techniques are detected. This process provides a stronger, deeper assurance activity that delivers more value to your business.
Our red and blue teams work closely together to maximise the effectiveness and deliver a more robust and dynamic service. Our red team carries out the attacks and challenges the business. Our blue team defends the attacks with the current security and infrastructure you have in place.
REPORTING
Our specialist team will present you with a full report of all identified issues, graded by criticality, including how we found them, how serious they are and how they compare to other firms in your industry.
POST TESTING
We will give you a step-by-step insight into what you can do to resolve any areas we identified as vulnerable. Improvements can either be carried out by the in-house IT team or by our technical assurance team.
