Penetration Testing
We test your defences the way a real attacker would, with your permission.
The problem
Controls that look fine on paper can fail under real attack. Authorised testing finds the gaps before a criminal does, and shows you exactly how they could be used.
What's included
- Testing of agreed systems, networks and applications
- Clear rules of engagement and written authorisation before any testing
- Safe testing approach agreed with you, including timing and what is off limits
- Evidence-backed findings, ranked by risk
- Retest after fixes to confirm the problems are closed
How it works
- 1
Scope and authorise
We agree what is in scope, the rules of engagement, and get written authorisation before any testing starts.
- 2
Review and test
We examine your configuration and, where agreed, test it the way an attacker would.
- 3
Report
You get a clear report: what we found, how serious it is, and how to fix it, in plain English.
- 4
Retest
Once you have made fixes, we check they actually worked.
FAQs
Do you test without permission?
Never. Testing only starts after a written scope and authorisation. Unauthorised testing is illegal.
Could testing disrupt my business?
We agree timing and safe methods with you up front. Anything likely to cause disruption is discussed before it is done.
What can you test?
The exact scope is agreed per engagement. Contact us with what you would like tested and we will tell you honestly whether it is a good fit.