Your shopping cart is currently empty.
This External Infrastructure Penetration Test uses a mix of advanced manual testing techniques and automated scans to simulate real-world attacks to identify risks within your business.
It will assess:
Download the full service description
At the end of the test, you will receive a comprehensive report broken down into:
High-level, non-technical summary of your business’ risks.
Detailed description of the methodologies followed and the scope of testing.
Overview, consultant’s commentary, and detailed descriptions of each technical vulnerability identified along with remediation advice.
Download the full service description
This test follows IT Governance’s proprietary security testing methodology, which is closely aligned with the SANS, OSSTMM (Open Source Security Testing Methodology Manual), and OWASP (Open Web Application Security Project) methodologies.
This service is suitable for organizations that have public-facing infrastructure such as remote access solutions, servers, networking equipment, etc.
The test covers external IP addresses. IT Governance IP addresses will need to be whitelisted if an IPS (intrusion protection system) is enabled. Price will depend on the number of IP addresses.
Identify and understand the technology-related vulnerabilities affecting your external infrastructure and the business impacts these present.
Demonstrate a strong security posture to clients by providing third-party assurances that your external infrastructure is secure.
From the detailed report, you will be able to implement secure measures (such as secure authentication and session management controls, and improved user access controls), thereby reducing the likelihood of a security breach while protecting your brand.
Supports compliance with ISO 27001, the GDPR (General Data Protection Regulation), the PCI DSS (Payment Card Industry Data Security Standard), and other laws, regulations, and contractual obligations.
Our expert consultant will provide you with updates throughout the project from both technical and non-technical perspectives.
Our established penetration testing team has amassed extensive testing experience that ensures clients receive a comprehensive service.