External Vulnerability Assessment

The External Vulnerability Assessment is the combination of a network security penetration test and examination of potential internal vulnerabilities of your key network servers, such as your email server, web server and application servers. The test will determine if your existing firewall and/or IDS can be penetrated using the latest intrusion tools and, if so, provide you with a detailed picture of what vulnerabilities could be identified on your system servers. We will provide a professional report documenting all vulnerabilities found and suggested corrective action. The report will also provide a management overview, potential risks and suggested actions.

The NETBankAudit Penetration Test is a live test mimicking the actions of real life attackers. Conducting a Penetration Test is a valuable experience in evaluating your security and preparing your defenses against the real thing. As detailed in the summary below, this fully managed; OSSTMM compliant service far exceeds standard Security 'Checks' provided by other companies.

The boundaries of a Penetration Test must be defined. More comprehensive steps we can take include Internal Security Audits, and Security Policy Reviews. Working with us, you can test the detection and response capability of your organization in a consequence free exercise.

PENETRATION TEST SUMMARY

All NETBankAudit penetration tests follow documented open-source, standard security testing methodology:

Network Surveying
Port Scanning
System Fingerprinting
Services Probing
Exploit Research
Manual Vulnerability Testing and Verification
Limited Application Testing
Firewall and ACL Testing
Intrusion Detection System Testing

The assessment results in an extensive report containing:

Executive Summary
Business & Technical Risks and Recommendations
NETBankAudit Penetration Test Methodology
List of vulnerabilities broken down into areas of concern
Details and exposure of vulnerabilities
Penetrations by areas of concern
'Capture the flag' results and successfully penetrated systems
Recommendations and counter measures