Challenges

  • Automated scanning does not reveal real exploitation chains

Scope

  • Web application and API penetration testing
  • internal and external network penetration testing
  • mobile application penetration testing
  • protocol testing using fuzzing

Deliverables

  • Penetration test report
  • attestation letter
  • re-test after remediation

Target clients

All sectors

Frameworks, standards & technologies

OWASP · PTES

Value

A practical assessment of security readiness, used to support go-live and relevant compliance requirements.

Success indicators (set with the client)

Number of exploitable vulnerabilities closed before go-live · re-test result

Starting the engagement

Scope, deliverables, requirements and success indicators are agreed before delivery. Include the service name and code in your enquiry.

Client requirements

The catalogue specifies no additional prerequisites for this service. Access, stakeholders and the agreed scope are confirmed before delivery.