Penetration Testing
What it is
- Shows you how a hacker could see your network - draws out weaknesses and risks
- Often required for compliance, eg PCI-DSS, GDPR, IS027001, TDP, or by customers in order to do business
- Security weaknesses are exploited, to penetrate into the system being tested
- Shows the business context of weaknesses found - ie what exploitation of those weaknesses could lead to, what data could be accessed etc
- Report shows prioritised findings, calls with experts can be arranged to go through the results
- A retest, after the remedial work is completed, can be included in the quote if required
- Our vendors do all the different types - external and internal infrastructure tests, web app tests, wif-fi tests, etc - External infrastructure - how and outside attacker would see your network - Internal infrastructure - attacker in your network, eg with stolen credentials, or a a rogue employee - Web application test - how a hacker could see your public-facing web apps and break through to the data behind - wi-fi - how a hacker could see your - Wi-fi network and exploit weaknesses
Questions
- Do you need to have penetration tests for compliance reasons, eg PCI DSS, ISO 27001 or other?
- Do you need to have penetration tests to meet your customers’ requirements for IT Security?
- Do you need to have penetration tests to meet requirements for cybersecurity insurance?
- Do you want to test your cybersecurity defences, and then improve them, by having a penetration test?
- Do you know what kind of penetration testing do you require: - external infrastructure test - how and outside attacker would see your network - internal infrastructure test - attacker in your network, eg with stolen credentials, or a a rogue employee - web application test - how a hacker could see your public-facing web apps and break through to the data behind - wi-fi test - how a hacker could see your wi-fi network and exploit weaknesses
- Would you like to have a firewall configuration review at the same time as the pen test?
- Can we quote for your next penetration test?
Pitch
By selecting from its multiple vendors according to requirements, Titan arranges top quality pen tests from certified experts at very competitive prices.
Titan uses highly accredited and certified vendors. Requirements can be met for CREST and CHECK certifications, as well as ISO 27001, ISO 2000, ISO 9001. Personnel with different types of security clearances can be provided. Titan’s vendors can be trusted to provide a thorough test while at the same time using great care in the process. Expert execution and review by top security engineers is crucial to obtaining a good result.
Titan can provide service specifications and sample test reports, so that you can see exactly what you will get from the testing. Care is taken in the scoping process, to ensure a successful end result.
Titan can also arrange calls with the experts, who will listen to requirements and explain their proposed activities.
If you have been using another company in the past, it can be good security practice to change the tester and get a fresh view. Other reasons to change supplier may include dissatisfaction with past services (eg lack of communication, expensive retesting) and search for lower pricing. Titan is positioned strongly to compete in both these areas.