How vulnerable is your public facing system?

In an External Penetration test, we perform a vulnerability scan of your company’s externally facing (public) systems, manually verify issues, and exploit issues.

Our team uses a number of Static and Dynamic Application Security Testing tools which can highlight the security vulnerabilities in your code base. Taking into account that software has dependencies on the open-source code and other dependencies, we will check it for the known vulnerabilities to identify if there are any security issues with the dependencies used by your code.

Mimicking the activities an attacker or malicious insider might perform.

Starting as a least privileged user we attempt to gain access to other systems, identify sensitive information, escalate privileges on the network, and pivot to other areas of the network using a local system with only normal user credentials provided by you. The level of access used as a starting point simulates what an attacker may have gained through a successful phishing email campaign or by imitating an employee or contractor. This item is meant to highlight the “unknown unknowns” and assist your company with understanding what can happen and how ultimately allowing you to raise the bar on your internal security.

70% of the successful attacks start with social engineering. We will model the sophisticated targeted social engineering attack on your employees. It will include the analysis of publicly exposed data, social networks, public documents etc to craft a social engineering attack, which can include email, or a phone call, SMS or message in a social network or messenger. We will do our best to trick your employees like the real attackers do. You can measure the effectiveness of our technical controls and awareness campaigns in fighting the social engineering attacks.