Penetration Testing

We scrutinize your security systems to help you understand your biggest weaknesses — and how those weaknesses could affect your business.

Learn More

‍

Our penetration testing turns buzzwords into valuable insights.

‍

EXTERNAL PENETRATION TESTING

‍

External network penetration testing is performed from the perspective of a remote attacker outside of the organization’s perimeter.

‍

The goals of an external penetration test include:

‍

• Identify vulnerabilities and misconfigurations in public-facing systems such as web servers and login portals, focusing on unpatched or out of date software, faulty code, privilege level escalation and much more. 
• Evaluate the effectiveness of external security controls such as routers, firewalls, and intrusion detection systems (IDS).
• Identify internal assets that have been mistakenly exposed to remote access.
• ‍[delete excess bullet]

‍

INTERNAL PENETRATION TESTING

‍

Internal penetration testing is performed from the perspective of an attacker that already has access to the organization’s internal network infrastructure. This allows the organization to measure the potential impact of a perimeter breach or insider threat situation.

‍

The goals of an internal penetration test include:

‍

• Evaluate the effectiveness of internal security controls, such as MDR/XDR and other advanced security control systems.
• Perform segmentation testing and assess whether it is possible to exfiltrate data from the corporate environment by bypassing data loss prevention (DLP) controls.
• Demonstrate the effects of an insider threat situation or perimeter breach.
• ‍[Delete Excess bullet]

‍

PHYSICAL PENETRATION TESTING

‍

Physical security testing is performed from the perspective of an attacker looking to exploit any security weaknesses of an organization. This creates an opportunity to evaluate the true security needs of the physical perimeter defense.

‍

The goals of a physical security test include:

‍

• Pinpoint key security gaps (including the evaluation of security cameras, security lighting, door access systems, HVAC vulnerabilities, etc.).
• Test security protocols used by staff (key cards, door codes, security guard procedures).
• Real-world testing approach, including Digital Silence professionals on site covertly.