Security services
Penetration tests
Find out where an attacker could get in. We test agreed applications and systems for vulnerabilities and make the potential impact concrete.
Discuss your needsThe challenge
When is this useful?
You want to know which weaknesses in an application or environment could be exploited. A penetration test provides focused insight into the areas assessed and helps prioritise remediation, for example in a web application or API.
We adapt the test to your situation: the systems involved, information available and access agreed for the assessment. We explain findings in the context of your environment.
Examples
Typical requests.
- Test a web application for exploitable weaknesses.
- Distinguish a possible risk from demonstrated impact.
- Retest agreed findings after remediation.
Working transparently
Clarity before we begin.
We define the systems in scope, permitted methods and testing window in advance. We agree on authorisation, contacts and how findings are reported. This makes boundaries and responsibilities clear to everyone involved.
From question to outcome
How we work.
Agree the test rules
We discuss the goal, environment, access and permitted actions, and how we will stay in contact.
Investigate the agreed areas
We test the agreed systems, assess the meaning of weaknesses and record relevant findings.
Discuss remediation
We explain the vulnerabilities, their impact and suitable measures. If needed, we can agree a separate scope for fixes or a retest.
What you receive
What you receive.
- The test scope and areas assessed
- Specific vulnerabilities with evidence and impact
- Advice on addressing the findings
- A briefing with room for questions and next steps
You can ask questions about decisions and results. We explain what is complete, what still needs attention and which next steps may help.
Practical questions
More about penetration tests.
How much does a penetration test cost and how long does it take?
It depends on the systems, information available and permitted test actions. We define the scope and propose a test window, deliverables and cost. Remediation and retesting are agreed separately.
Can you test a live production environment?
We agree on the environment and permitted actions first, and discuss technical and operational conditions before testing starts.
Can you retest a vulnerability after it is fixed?
Yes. We can retest specific findings and agree which changes and systems will be checked.
Direct contact
Tell us what is happening.
You do not need to know the solution yet. Send us a message or email. Prefer to meet first? Request a 30-minute introduction and we will find a time.