Penetration Testing

Penetration Testing Services from Infosec Partners

WE BREAK IN SO OTHERS CAN’T

How good are your defences
against an intruder attack?

A security penetration test is a controlled and managed simulation of an actual system intrusion. It gives you a realistic experience of an attempted break-in – whether from an outside intruder or from your employee or business partner. During InfoSec Partners penetration testing, your security mechanisms as well as your intrusion detection and response capabilities are put to the test against a skilled attacker.

Why PENTEST?

• Find and Plug Gaps in Security
• Achieve/Maintain Compliance
• Improve Your Security Strategy

Penetration Testing Goals

• Audit the effectiveness of controls to meet compliance
• Red team testing (ethical hacking) is designed to measure how well an organisations defence and response capabilities will stand up against attacks from a simulated real-life adversary

Infosec Partners provides a full spectrum of security penetration testing to meet your goals.

We help you make sure any security gaps
we find are closed

Infosec Partners provides a flexible portfolio of security testing services, resulting in reports and recommendations that executive management as well as technicians can all gain the information they need.

Pen test reports summarise the potential impacts and business consequences of exploitation of any discovered vulnerabilities, whilst cost effective strategies to mitigate risk are presented. For the more technical audience, carefully crafted examples are used to illustrate how vulnerabilities can be exploited, or reproduced in a test-bed and are provided with detailed remediation instructions.

Infosec Partners includes re-tests on found vulnerabilities to ensure that the client’s internal team or primary outsource partner has successfully completed remediation.

Types of Penetration Test

Penetration tests can be conducted in several ways. The most common difference is the amount of knowledge of the implementation details of the system being tested that are available to the testers. Black box penetration testing assumes no prior knowledge of the infrastructure to be tested. The testers must first determine the location and extent of the systems before commencing their analysis.

At the other end of the spectrum, white box penetration testing provides the testers with complete knowledge of the infrastructure to be tested, often including network diagrams, source code, and IP addressing information.

Black box testing simulates an attack from someone who is unfamiliar with the system. White box testing simulates what might happen during an “inside job” or after a “leak” of sensitive information, where the attacker has access to source code, network layouts, and possibly even some passwords.

Gray box testing is a combination of white box testing and black box testing. The aim of this test is to discover defects resulting from improper structure or improper use of applications.

types of pentest