Web Application Penetration Testing

Web applications are interactive applications that are accessible over the web. In most cases, you can work with the application using a browser. An example of a classic web application is a web shop. Further web applications can be found in portals for customer management, photo book software on the web, systems for monitoring servers and services and much more. A characteristic of a web application is that users can interact with the system across platforms. There are also differences in whether everyone (more in the web shop) or only a limited group of users (acquisition tool) is allowed to access it. The wider the access, the higher the IT security requirements.

Network Penetration Testing

Network penetration testing reveal exploitable vulnerabilities in networks, systems, hosts, and network devices i.e., routers and switches, allowing for unauthorized network access to sensitive data.

Cyber Risk Assessment

Not all companies require a penetration test to successfully evaluate their security posture. Regular vulnerability scans are often an alternative. An engineer performs vulnerability scanning to search systems for known vulnerabilities without exploitation attempts with an end goal of providing a remediation report prioritized on risk.

Penetration Testing Explanation

There are different types of penetration testing that we offer you. We would be happy to explain every single type of penetration testing to you. External pentest This approach is often chosen. Companies want to know how secure they are against external attacks. Internal pentest If the company to be tested is of a certain size (from around 50-100 employees), internal IT security factors gain in value. So trust in one's own employees is no longer guaranteed by a family environment. The risk of an internal attack increases with the size of the company. A goal is defined for an internal IT penetration test. This can be, for example, testing all internal systems or checking security against internal attackers in the event of certain break-in scenarios. Priorities, such as theft of the hashed passwords on the domain controller, can be set.