Penetration Testing | Vulnerability Assessment | Security Consulting
Expert Speakers | Cyber Forensics | Training

Penetration Testing

Penetration Testing is our hallmark service offering.

PENETRATIONTEST.com has been conducting ethical hacking excersizes for more than 10 years, and is seldom unsuccessful at penetrating its target or uncovering vulnerabilities worthy of immediate attention. Specific details of all discovered methods of compromise are then provided in a Security Issues Tracking Document, case histories, and descriptions of vulnerabilities that although may not be an immediate problem, could lead to compromise in the future given the increasingly heightened level of hacker capabilities.

Unlike many other companies, we do not stop testing when we find a successful method of intrusion. PENETRATIONTEST.com developed the Offensive Operations Model to find and demonstrate all vulnerabilities that can be exploited by existing penetration technologies, as well as vulnerabilities that may be difficult to exploit now, but could become serious in the future.

The Offensive Operations Model, detailed in the Whitepapers section, covers every possible reason a site might be targeted for penetration: from simple web defacement, to industrial espionage, from script kiddies to full-on information warfare.

Vulnerability Assessment

A thorough, properly conducted Vulnerability Assessment is reconnaissance at its finest.

Don't confuse a Scan for an Assessment. A true Vulnerability Assessment is not simply a scan from an automated scanner (Nessus does a good job of that for free!). An assessment requires analysis of results, and review of the architecture itself in order to properly understand the vulnerability footprint. An expert Vulnerability Assessment can even help you discover and mitigate risks caused by vulnerabilities that an automatic scanner would not be able to notice, but would be obvious to a dedicated attacker.

PENETRATIONTEST.com will profile the target site and provide all gathered information that could be used in a security breach. This includes, but is not typically limited to:

• Automated Vulnerability scanning
• Human review of results to ensure accuracy
• Review of firewall and router rules to ensure accuracy
• Review of network architecture and dataflow to spot potential vulnerabilities behind the firewall
• “Googling" and data mining for information leaks
• Firewalking and other network discovery attacks

Security Consulting

PENETRATIONTEST.com works only with proven consultants to provide custom security services to our customers. Our consultants have developed fault tolerant secure infrastructures, implemented wireless and VoIP solutions, provided incident response, etc. Call or email us with your needs.

Expert Speakers

PENETRATIONTEST.com experts provide presentations, seminars and short courses on a wide range of security topics. Please phone or email with your requests.

We have taught such subjects as General TCP/IP Security Considerations, Firewall Implementation, Secure Robust Architectures, Penetration Testing Methodology, How Viruses Work, and so on. We have conducted public speaking engagements on Information Security topics and hacker demos for ISSA, BytePro, Internet World LA, Internetworld NY, and so on.

We have also appeared on numerous television news and documentary shows, and have been quoted by several magazine and newspaper articles about security issues.

Cyber Forensics

When a security incident occurs, it is important to act fast and appropriately to ensure data, as well as evidence of the crime committed, is not destroyed or tampered with.

PENETRATIONTEST.com applies the industry's best practices in isolating and profiling the evidence to determine what occurred, and if and at what point law enforcement should be notified. PENETRATIONTEST.com will provide guidance during the evidence gathering to fully understand what has happened, and what should be done, so that the affected business units can get back to business in the shortest possible time, and appropriate actions are taken with minimal damage to the business.

PENETRATIONTEST.com has conducted both commercial and criminal forensic investigations, and provides forensic courseware and training through its education partners.

Training

PENETRATIONTEST.com develops some of the most in-depth courses and study material available. Click here for more information.