CREST-CERTIFIED PENETRATION TESTING SERVICES

Network penetration test, external
An 'external' pen test involves an ethical hacker probing your perimeter defences across the internet, providing an effective test of how your externally-facing network infrastructure responds to threats.

Network penetration test, internal
An internal penetration test simulates either the actions a hacker might take once access has been gained to a network, or those of a malicious actor, or disgruntled employee with access that he or she is looking to escalate.

Web application penetration test
A web application penetration test, looks for any security issues in your websites and web applications, including CRM, extranets and internally developed programmes - which could lead to exposure of personal data, credit card information etc.

Social Engineering
A social engineering pen test will help you understand the susceptibility within your organisation to human manipulation. Social engineering techniques are wide ranging, from the very simple, to highly personalised, sophisticated attacks.

Black Box testing

With a black box penetration tests, no information is provided about the infrastructure or environment, simulating how an internet hacker would attack your environment.

White Box testing

Detailed information is provided about the environment, simulating how an attacker with knowledge (e.g. employee/insider) could present a risk to the organisation.

Grey Box testing

A grey box test is a blend of black box and white box testing techniques. Selected snippets of information are provided, for a more focused test and reduced timeline (than black box testing).

Yes.

A vulnerability scan uses a suite of software tools, providing a technical assessment of your IT estate, scanning your network infrastructure to identify unpatched software updates, incomplete deployment of security software, or open ports, for example.

Whereas a pen test is performed manually by a skilled pen tester, simulating an attack using a range of strategies and techniques, as a hacker would use in a real world cyber attack.