
Penetration testing remains a valuable part of any security assessment, the only sure way of assessing the strength of the protection their systems provide for confidential business data, including customer or client information, or intellectual property. Without watertight external network defences, organisations might as well throw open their office doors to all-comers, or discuss sensitive business issues using megaphones.
Our penetration testing services subject the network infrastructure to a series of controlled attacks conducted over the internet, targeting every publicly accessible part of the network as well as remote access systems such as VPNs and dial-in servers. The initial stages of the process, information gathering, reconnaissance and vulnerability scanning, are followed by manual vulnerability exploitation tests and targeted application testing. This is a comprehensive and rigorous programme, designed to locate current and potential vulnerabilities. We aim to help organisations locate and correct any current weakness in their defences and offer advice and guidance as to how to reduce the chances of further vulnerabilities appearing in the future.