Penetration Testing
","stylesMapId":"CK_EDITOR_PARAGRAPH_STYLES","linkList":[]},"dataItem-jof9dlgk":{"type":"StyledText","id":"dataItem-jof9dlgk","metaData":{"isPreset":false,"schemaVersion":"1.0","isHidden":false},"text":"Penetration Testing Service
\n\nA penetration test evaluates the ability of a computer, network or software application to withstand a cyber attack. The test and its associated penetration test report are essential audit tools for the cyber risk assessment of an IT system. They are used as a practical guide to improve the security of an IT system and to meet the organisational requirements for compliance to standards that include the Payment Card Industry Data Security Standard (PCI DSS) and ISO 27001.
\n\n
","stylesMapId":"CK_EDITOR_PARAGRAPH_STYLES","linkList":["#textLink_jof9f2bg","#textLink_jof9f2bg1"]},"dataItem-jof9dlj9":{"type":"StyledText","id":"dataItem-jof9dlj9","metaData":{"isPreset":false,"schemaVersion":"1.0","isHidden":false},"text":"What is a penetration test?
\n\nPenetration testing or ethical hacking uses a series of automated and manual processes to discover the security weaknesses in an IT network, web site or application. Performed with the permission of the system owner, security vulnerabilities are identified and exploited to demonstrate how they can be used to facilitate a cyber attack. Measures and controls to prevent or mitigate the impact of an attack are recommended for each major vulnerability.
\n\nWhat is a vulnerability assessment?
\n\nA vulnerability assessment involves the use of software tools that automatically scan computers, networks, web sites and software applications for security weaknesses. Vulnerability scans are performed at the start of every penetration test to quickly provide a comprehensive list of all known insecure network configurations and vulnerabilities.
\n\nSimulated attack and exploitation
\n\nThe weaknesses identified by vulnerability assessment are manually reviewed and ranked by their potential impact on the organization. Using the techniques and tools employed by hackers, our experienced penetration testers perform simulated exploits on the vulnerabilities with the highest risk. Each manual exploit is fully documented to demonstrate the attack strategy, its methodology and where possible, factual evidence of exploitation.
\n\nPenetration test report
\n\nABCTech's Penetration Test Report includes an overview of the tests performed, an executive management summary, a technical summary and a technical detail section. The Common Vulnerability Scoring System (CVSS) describes the principal characteristics of a vulnerability and defines a numerical score reflecting its potential severity of impact. Remedial activities that prevent or mitigate the cyber exploits associated with each vulnerability are identified and linked to references that provide further detailed background information.
\n\n
","stylesMapId":"CK_EDITOR_PARAGRAPH_STYLES","linkList":[]},"dataItem-jofcd6xz":{"type":"StyledText","id":"dataItem-jofcd6xz","metaData":{"isPreset":false,"schemaVersion":"1.0","isHidden":false},"text":"Network Penetration Testing
\n\nA network penetration test is designed to assess an IT network for vulnerabilities and security issues in its servers, hosts, devices and network services. It particularly focuses on the ‘external view’ as seen by a hacker with respect to Internet-facing assets such as firewalls, intrusion prevention systems, web sites and unauthorized access. Network penetration testing can also be applied as an ‘internal test’ which assess the risks and vulnerabilities associated with staff and authorized users.
\n\n
\n\nThe benefits of a penetration test
\n\nProtect your company from cyber attack – prevent theft and loss of reputation
\n\tDeliver effective cyber security management – select and invest in the best security controls
\n\tIndependent expert assurance – check that security controls are working as intended
\n\tProtect against compliance breaches – avoid costly fines and litigation
\n\tSatisfy compliance requirements – achieve and maintain FCA, PCI DSS, GDPR and ISO 27001
\n\tDemonstrate your cyber security posture – build a secure brand and win new business
\n\tWeb Application Penetration Testing
\n\nWeb applications deliver accessible and powerful services to consumers and businesses throughout the world. At the heart of modern banking, e-commerce and cloud-based IT provision, they are an attractive and easy target for cyber criminals. In common with all software, web applications contain vulnerabilities which can be exploited by a hacker to steal confidential information directly or to create a transmission platform to infect another computer with malware.
\n\nPenetration testing or ethical hacking is a key technical audit tool for the risk assessment of a software application. A web application penetration test is designed to identify security weaknesses which have been unknowingly added by software developers as they design, code and publish their software.
\n\n
\n\nThe benefits of a web application penetration test
\n\nDevelop and support strong authentication and access control
\n\tIdentify common software vulnerabilities that include SQL injection and XSS
\n\tPrevent unauthorised access to web servers and databases
\n\tEnsure cyber security is assessed at each stage of the software development life cycle
\n\tEnsure compliance to data security standards that include PCI DSS and ISO 27001
\n\tWireless Penetration Testing
\n\nWireless technologies provide seamless access to IT resources from desktop and mobile devices located in office or remote locations. In expanding the physical and geographic coverage of an IT system, they provide the hacker with the opportunity to monitor network traffic and easily gain access to individual computers, servers, databases and software applications.
\nA wireless penetration test is designed to assess an IT network for vulnerabilities and security issues associated with wireless access. It particularly focusses on the ‘external view’ as seen by a hacker with respect to wireless access points, access control, encryption, wireless fingerprinting and information leakage.
\n\nThe benefits of a wireless penetration test
\n\nFind rogue or open access points
\n\tDiscover vulnerabilities that support encryption cracking, sniffing and session hijacking
\n\tIdentify insecure wireless encryption standards such as WEP
\n\tSpot security weakness in Bluetooth connected devices
\n\tEnsure compliance to data security standards that include PCI DSS and ISO 27001
\n\t