You may have heard about Penetration Testing or Pentesting before.
If you are not sure where to being, talking to our security experts about conducting a penetration test is a good place to start.
Every organization has its own security needs, and Horangi provides customized security offerings, including tailored penetration tests for our customers.
Step 1: Which colors do you want?
□ BLACK □ WHITE
Black Box : For application or systems by simulating an attack from outside and inside. In this scenario, clients give us limited information about the target and we will test it from the perspective of an attacker!
White Box : In this scenario, clients will give us complete access and information about the applications or systems, for a comprehensive test. Complete knowledge of the infrastructure is required for network penetration test.
Step 2 : Which type of applications do you have?
□ Thick Client □ Web App □ Mobile App □Network
Thick Client Penetration Test : Tests done on binary files installed on a computer
It is installed on local computer (client side) using computer resources. These applications periodically accesses information from a remote server. These applications might use multiple ports and non-standard protocols.
Mobile Penetration Test : Tests done on mobile applications
Mobile penetration test is a subcategory of thick client penetration test, however the requirements are different.
Web Application Penetration Test: Tests done on web applications
For this penetration test, web applications are able to be accessed through a browser. These applications usually use the HTTP/HTTPS protocol.
Network Penetration Test : Tests done on devices on a network
This test is used to evaluate the susceptibility of devices in a network. By identifying the vulnerabilities found in client's networks,hosts and devices, network penetration testing evaluates the level of risks posed by vulnerabilities and misconfiguration.
Step 3 : What kind of tests do you require?
□ External □Internal
External Penetration test : External penetration tests are conducted from a publicly accessible network, from the perspective of a external attacker. Remote pentesting are often done remotely.
Internal Penetration test : Internal penetration tests are conducted within the client’s network. It has the advantage of taking into account potential internal threats, such as actions from malicious individuals or disgruntled employees.