Security put to the test

If you want to stay in business it is now critical for organisations to ensure that they are secure. Penetration Testing and Vulnerability Scanning is considered the best point in time assessment of your current security standing. Whilst Penetration Testing and Vulnerability Scanning get categorised together there are some slight differences.

Vulnerability Scanning

This is usually run using automatic testing tools with the objective of reviewing the technical controls of a company against a set of known vulnerabilities. It will measure your current defences and highlight any operational weaknesses.

Penetration Testing

Penetration testing focuses on exploiting system vulnerabilities. This is usually performed by a human using the same techniques currently being used by malicious threats in an attempt to breach your current security controls and gain access to your systems.

As with any project, planning is the key to a successful delivery. When deciding how best to perform testing, clear objectives and goals must be defined and a framework developed to ensure those goals are reached. During the planning phase we will work with you to:

• Define your assets
• Define the deliverables
• Define the testing type required
• Define the rules of engagement
• Establish the lines of communication

Once these have been completed we will create a test plan that will be reviewed and signed off before any testing takes place.

There are a number of different test types that we can complete and these differ on the amount of prior knowledge the tester knows about the target and the amount of awareness the target has about the test. We have both experienced and professionally accredited penetration and vulnerability scanning professionals who can provide a range of services including:

• External Vulnerability Scanning (from a remote location)
• Internal Vulnerability Scanning (from the target location)
• External Network Penetration Testing (from a remote location)
• Internal Network Scanning (from the target location)
• Web Application testing
• Wireless Security testing