Penetration Testing
Penetration Testing or “ethical hacking” is a service that evaluates the security of your digital assets through a simulated cyber-attack. We have experience working with the latest tools and technologies, and leverage them to bypass the security of corporate networks protected by even the most sophisticated security controls.
Find weaknesses others overlook.
Our Penetration Testing methodology is aligned to industry standards and is compliant with various regulatory requirements including PCI DSS 11.3. The primary objective of this type of testing is to uncover vulnerabilities residing in IT systems, applications or network components and attempt to exploit them in order to obtain access to sensitive information or functionality.
Packetlabs consultants think outside of the box, find weaknesses others overlook, and continuously learn new ways to evade controls in modern networks. During our engagements, we take the time to understand each of the in-scope components and their role in the overall system tested. Based on this, we custom tailor our approach to each environment we assess.
Looking to assess your organization instead of a particular system component? Review our objective-based penetration testing solution for more details.
Within each phase of our methodology, the following issue types will be examined:
NETWORK SECURITY
OS AND THIRD-PARTY PATCHING
Cryptography
CLIENT-SIDE PROTECTION
Authentication
WEB APPLICATION SECURITY
SYSTEM CONFIGURATION
DATABASE SECURITY
E-MAIL PHISHING
What We Deliver
At the conclusion of testing, we assemble a detailed report outlining our findings, coupled with prescriptive recommendations to enhance the security within the environment. Each finding is documented with screenshots, and an attack narrative to illustrate the potential risk. Putting the pieces together, we perform root-cause analysis and provide both tactical and strategic recommendations.
Related Resources
May 10, 2016
PCI COMPLIANCE TESTING METHODOLOGY
Packetlabs’ security testing methodology is based on industry standards and is primarily aligned with NIST SP800-115 to ensure compliance with most regulatory requirements.
101000110010101001001110010110010100010100101111001010100000001
