Our Combined External Infrastructure and Web Application Penetration Test is built upon an established bespoke methodology, emulating the techniques of an attacker and using many of the same readily available tools.
This enables a full assessment of the key components of the web applications and external network infrastructure, covering:
Download the service description for the full list
A high-level, non-technical summary of vulnerabilities identified and your business’s risks.
A detailed description of the methodologies followed and the scope of testing.
Overview, consultant’s commentary and detailed descriptions of each technical vulnerability identified, with remediation advice.
Download the full service description
The test will be performed using IT Governance’s proprietary security testing methodology, which is closely aligned with the SANS, OSSTMM (Open Source Security Testing Methodology Manual) and OWASP (Open Web Application Security Project) methodologies.
This service is suitable for most organisations that have public-facing web applications and underlying infrastructure such as company websites, customer portals or e-commerce websites.
Identify and understand the technology-related vulnerabilities affecting your network, and the business impacts these present.
From the detailed report, you will be able to implement secure measures (such as strong authentication and session management controls, and keeping untrusted data separate from commands and queries), thereby reducing the likelihood of a security breach while protecting your brand.
Demonstrate a strong security posture to clients by providing third-party assurance that your external infrastructure and web applications are secure.
Supports compliance with the PCI DSS (Payment Card Industry Data Security Standard), ISO 27001, the UK DPA (Data Protection Act) 2018 and the GDPR (General Data Protection Regulation), as well as other laws, regulations and contractual obligations.
Protect brand loyalty and corporate image by reducing the likelihood of a security breach.
Our expert consultant will provide you with updates throughout your project, from both technical and non-technical perspectives.
Our established UK penetration testing team has extensive testing experience that ensures clients receive a comprehensive service.