SERVICE / BEFORE
Penetration testing.
Authorized, scoped testing that shows how an attacker could get in and what they could reach.
AT A GLANCE
What this covers
Who it serves
Teams needing independent validation for customers, insurers, auditors or their own roadmap.
Typical trigger
Annual requirement, new application or infrastructure, or a compliance ask.
The work
- Scoping and written rules of engagement
- External, internal, cloud, web app or social-engineering testing (as scoped)
- Exploitation to demonstrate impact safely
- Readout with your team
Deliverables
- Report with reproducible findings and severity
- Executive summary
- Retest of fixed findings (if in scope)
Not included
- Testing outside written authorization
- OT/ICS testing unless explicitly scoped and agreed separately
Talk it through
Tell us where you are. We’ll recommend a sensible first step.