Penetration Testing

CREST LogoWe're a CREST-approved provider of penetration testing. Our skilled ethical hackers are trained to replicate the mind of a malicious attacker and use an exhaustive set of tools to perform and imitate this mindset.

We offer a wide range of penetration testing services covering all aspects of organizational security, such as infrastructure, web applications, social engineering and, of course, mobile.

We use a risk-based approach to assess systems from an attacker's point of view, as well as against industry best practices.


The goals of a penetration test

  1. Determine feasibility of a particular set of attack vectors
  2. Identify any vulnerabilities which are present, including any that are high-risk which result from a combination of lower-risk vulnerabilities exploited in sequence
  3. Identify vulnerabilities that may be difficult or impossible to detect with automated network or application vulnerability scanning software
  4. Assess the potential business and operational impacts of successful attacks
  5. Test the ability of network defenders to detect and respond to attacks
  6. Justify increased investment in security personnel and technology

Penetration tests are an important part of a full security audit. For example, the Payment Card Industry Data Security Standard (PCI DSS) requires penetration testing on a regular schedule and after any system changes.


Our penetration testing services

We provide a range of different services, from web and mobile applications to internal network or external infrastructure testing, to reviews of components within your organization's infrastructure, such as servers, workstations or network devices.

We work with you to identify the appropriate penetration testing services. This ensures your business requirements are met and provides assurance over your organization’s security posture and risk.

Following testing, we will provide a technical-level report giving detailed findings and recommended resolutions in a management summary.

View a full summary of our services here