How do you know your security defences are protecting your IT assets if you’ve never tested them?
Contact us for a sample penetration testing report
What is a penetration test?
A MorningStar Security team can simulate a hacker launching an attack against your IT infrastructure. Unlike a real attacker due care is taken not to crash or damage any systems. Testing that could lead to a denial of service event can be conducted while your IT staff are available, eg. to reboot servers if required.
Why get a penetration test?
- Identify security vulnerabilities and assess risk before the bad guys exploit them. Leveraging your vulnerabilities to commit crime or cause business downtime.
- Technical due diligence and industry compliance. How do you know your IT provider or department develops secure software?
- Proactively protect your brand. If your website gets hacked would you lose brand confidence?
- Prove that you are relying on insecure software and a source code review is required.
What can be tested?
Before a test can begin we will identify and agree on attack vectors that are within the scope of the test. The more vectors considered in the test the more realistic the test is.
Common Attack Vectors
- Web applications
- Internet servers
- LANs / Internal networks
- Phone systems (PBX)
- Social networking (Facebook, Twitter, Bebo)
- Wireless networking (Wifi, Bluetooth)
Professional Methods
We follow the OWASP Penetration Testing methodology.
Reporting
Detailed reports focus on the root causes of vulnerabilities.
Your report will follow a structure similar to :
Non Technical Section
–Executive Summary
–Scope
–Non Technical Key Findings
–Recommendations
Technical Report
–Technical Attack Summary
–Vulnerabilities
Appendix
–Screen shots
Please contact us with the website form to discuss your needs.
Doubledot Media utilized MorningStar Security’s penetration test service and found it to be highly informative and valuable.
Their level of expertise and service consistently exceeded our expectations and I would not hesitate to use or recommend them again! A+
Simon Slade
Managing Director
Doubledot Media Limited
http://www.doubledotmedia.com