NETWORK

PENETRATION TESTING

Network Devices

Internal

Threats appear within the environment behind the external layers of protections an organization may have in place, such as a firewall. Internal Penetration Testing is highly valued by customers in all industries as they are used to identify vulnerabilities within the corporate network and stimulating publicly known and custom exploitation’s on the hosts within the network. A penetration testing should be conducted within the network to discover potential flaws on; operating systems, third party libraries, internal databases, internal APIs, connected IoT devices and other network devices such as printers, fax machines and phones.

External

Threats lurk on the line of defenses your organization has in place. It is highly recommended to conduct external penetration testing assessments for your organization on a semi-annual basis as new threats arise on a daily basis and malicious actors develop new tactics and skills to exploit them.  This assessment is one of the most favorable assessments as it discloses the level of potential vulnerabilities exposed externally to the world. Network endpoints required to be tested are; firewalls, email servers, VPN gateways, web application servers, cloud hosted end-points and other external facing devices.

When should my organization have a penetration test?

• Satisfy PCI, HIPAA and NERC-CIP compliance 
• Test your cyber-security controls after they mature
• To match up critical vulnerabilities with critical assets
• To identify all false-positives and false-negatives

• At least annually, recommended semi-annually
• After changes to your configurations or hardware
• Patch management remediation on discovered vulnerabilities
• AS OFTEN AS YOU LIKE

Penetration Testing Approach & Methodology

1. Define Scope

Detailed outline with the customer to define what assets are in scope.

5. Exploitation

Exploit vulnerabilities discovered in the vulnerability analysis stage with custom and generic exploitation scripts.

2. Information Gathering

Map out the corporate infrastructure based on services, ports, hardware, software and operating system. 

6. Post Exploitation

Successful exploitation’s lead to privilege escalation and new vulnerabilities to test for exploitation.

3. Threat Modeling

Determine mission critical and connected assets to corporate data through white, gray or black box approach.

7. Reporting

Creation of  Executive and Detail technical reports for both management and remediation team.

4. Vulnerability Analysis

Utilize enterprise and custom scanning tools to uncover vulnerabilities.

8. Exit Call

Call scheduled with customers management and remediation team to explain in detail the findings and assist in remediation processes.

1. Define Scope

Detailed outline with the customer to define what assets are in scope.

2. Information Gathering

Map out the corporate infrastructure based on services, ports, hardware, software and operating system. 

3. Threat Modeling

Determine mission critical and connected assets to corporate data through white, gray or black box approach.

4. Vulnerability Analysis

Utilize enterprise and custom scanning tools to uncover vulnerabilities.

5. Exploitation

Exploit vulnerabilities discovered in the vulnerability analysis stage with custom and generic exploitation scripts.

6. Post Exploitation

Successful exploitation’s lead to privilege escalation and new vulnerabilities to test for exploitation.

7. Reporting

Creation of  Executive and Detail technical reports for both management and remediation team.

8. Exit Call

Call scheduled with customers management and remediation team to explain in detail the findings and assist in remediation processes.

Why Choose Covert Threat?

Covert Threat’s industry leading security professionals are readily available to assist and recommend additional security methods to better protect your organizations environment. Our experts will work with your organization team leads to stimulate either a real-life penetration testing scenario with zero knowledge known as blackbox, partial knowledge, known as graybox or with full information on the corporate infrastructure disclosed to perform a whitebox assessment.

Advisory Solutions

VULNERABILITY ASSESSMENT

Network devices, Cloud infrastructure, Web applications, Wireless, Mobile applications and Internet of things devices

PENETRATION TESTING

Network devices, Cloud, Wireless, Web application, Internet of things devices, Mobile applications, Social engineering, Continuous penetration testing and Active directory enumeration

Is your business secure?

REQUEST

CovertThreat is ready to assist with all your organizational security needs! 

Are you Prepared?

ASSESS

Our team of  industry experts are ready to assess your organizational end-points to discover all possible security flaws.

Lets Us Find your Weak-points!

SECURE

Once we assess your organization for security flaws, our team provides the a detailed solution to eliminate the potential threat vectors. We work with you!