Our External Penetration Test follows best practice in penetration testing methodologies
which includes:
• Footprinting
• Public Information & Information
Leakage
• DNS Analysis & DNS Brute forcing
• Port Scanning
• System Fingerprinting
• Services Probing
• Exploit Research
• Manual Vulnerability Testing and
Verification of Identified Vulnerabilities
• Intrusion Detection/Prevention
System Testing
• Password Service Strength Testing
• Remediation Retest (optional)
• Software Infrastructure/Design
Weaknesses
• Input Validation Attacks
• Cross Site Scripting Attacks
• Script Injection Attacks (SQL
Injection)
• CGI Vulnerabilities
• Password Cracking
• Cookie Theft
• User Privilege Elevation
• Web/Application Server Insecurity
• Security of Plug-In Code
• 3rd Party Software Vulnerabilities
• Database Vulnerabilities
• Privacy Exposures
Why Should I Perform an External Penetration Test?
IT Security Compliance regulations and guidelines (GLBA, NCUA, FFIEC, HIPAA, etc.)
require an organization to conduct independent testing of the Information Security
Program to identify vulnerabilities that could result in unauthorized disclosure,
misuse, alteration or destruction of confidential information, including Non-Public
Personal Information (NPPI).
The Internet-facing components (website, email servers, etc.) of the organization’s
network are constantly exposed to threats from hackers.
Best Practice requires that each organization should perform an External Penetration
Test in addition to regular security assessments in order to ensure the security
of their external network.