Penetration Testing
Penetration Testing or “ethical hacking” is a service that evaluates the security of your digital assets through a simulated cyber-attack.
Find weaknesses others overlook.
At Packetlabs, our penetration testing engagements begin with the latest tools and technologies, and leverage them to bypass the security of corporate networks protected by even the most sophisticated security controls.
Our Penetration Testing methodology is aligned to industry standards and is compliant with various regulatory requirements including PCI DSS 11.3. The primary objective of this type of penetration testing is to uncover vulnerabilities residing in IT systems, applications or network components and attempting to exploit them to obtain access to sensitive information.
Packetlabs consultants think outside of the box to find weaknesses others overlook, and continuously learn new ways to evade controls in modern networks. We take the time to understand each of the in-scope components and their role in the overall system tested to custom tailor our approach to each environment we assess.
Looking for a penetration test of your organization instead of an isolated component? Review our objective-based penetration testing solution for more details.
Within each phase of our penetration testing methodology, the following issue types will be examined:
NETWORK SECURITY
OS AND THIRD-PARTY PATCHING
Cryptography
CLIENT-SIDE PROTECTION
Authentication
WEB APPLICATION SECURITY
SYSTEM CONFIGURATION
DATABASE SECURITY
E-MAIL PHISHING
What We Deliver
A detailed penetration test report outlining our findings, coupled with prescriptive recommendations to enhance the security within the environment
—
Each finding is documented with screenshots, and an attack narrative to illustrate the potential risk
—
A root-cause analysis to provide both tactical and strategic recommendations
Related Resources
May 10, 2016
PCI PENETRATION TESTING METHODOLOGY
Packetlabs’ penetration testing methodology is based on industry standards and is primarily aligned with NIST SP800-115 to ensure compliance with most regulatory requirements.
101000110010101001001110010110010100010100101111001010100000001
