External Penetration Test

Assess your exposure to targeted and automated attacks against your network perimeter.

Every second of every day, the internet is being scanned for vulnerable systems by opportunistic attackers looking for new additions to their networks of compromised systems. On top of that, advanced attackers are analysing exposed services for flaws that automated scans do not uncover, attempting to gain access to your internal systems and data. Let Improsec help you identify and eliminate vulnerabilities or misconfigurations before they are targeted by attackers.

Value

Improsec evaluates your security posture and protection of internet facing systems. We assess the security state of specific systems or your entire internet exposed infrastructure from the viewpoint of an attacker, enabling you to mitigate any vulnerabilities before an attacker finds and exploits them.

Product

The deliverable of the analysis is a written report containing the following:

  • A non-technical section with an Executive Summary for managers and decision-makers

  • A technical section including detailed observations and tangible recommendations to improve the security level and hardening the infrastructure

Method

Based on our specialized knowledge of hacking and techniques to compromise systems and networks, Improsec performs a comprehensive technical analysis, during which misconfigurations and vulnerabilities in the targeted systems are discovered and exploited.

During the test, we make use of manual techniques, specialised tools and scripts combined with automated scans to evaluate and compromise systems to obtain access to sensitive corporate data and resources. Areas evaluated during the test include: • Exposure of insecure services towards the internet • Presence of vulnerabilities and misconfigurations in the infrastructure • Presence of outdated and legacy systems • Exposure of VPN/VDI services and protection against unauthorised access Available web applications are tested at an overall level from an unauthenticated perspective.

Involvement

The delivery requires on-going involvement of your technical staff.