Penetration Test
Why Perform a Penetration Test?
Get in-depth testing with actionable insight for your organization
Prioritize Security Remediation: Penetration tests offer in-depth insights into real security risks that can be exploited. By performing penetration tests, organizations can proactively determine which vulnerabilities are critical, which are less significant, and which are false positives.
Meet Regulatory and Insurance Requirements: Penetration testing is a requirement of some regulatory programs and insurance requirements. Penetration testing can either identify security problems that need to be addressed to stay complaint, or to show auditors that the existing security controls are working properly.
Validate Existing Security Controls: Being confident in your security posture requires testing it. Are the security products your organization is running working? Is you configuration hardened to the extent that is expected?
The Process
Ensure your organization is tested for the most recent known threats.
Crossconnect Engineering’s penetration test uses the MITRE ATT&CK and Metasploit frameworks, among other threat sources. Our data sources are updated regularly to ensure your organization is tested for the most recent known threats.
Our service goes beyond vulnerability scanning. Our penetration test perform exploits, escalates privileges on the network, cracks password hashes, and even impersonates users to find sensitive data. The deliverable packages includes an executive summary, detailed technical report, and specific evidence captured from your penetration test that allows your organization to understand, mitigate, and attempt to reproduce threats identified from the penetration test.
WORKING WITH US
Why Crossconnect Engineering for your Penetration Test?
As a top-shelf engineering firm, Crossconnect is well-prepared to both help your organization understand and digest the findings. If desired, Crossconnect can also provide continued service to help remediate problems that are identified during the penetration test. Crossconnect’s tool-set meets regulatory requirements for SOC2, PCI DSS, HIPAA, IOS 27001, etc, as well as cyber insurance requirements.
Pricing
Pricing uses a sliding scale based on organization size, quantity of IP addresses, and internal or external IPs.
As such, a scoping call is recommended before pricing. It is also recommended that prospective customers
provide specific IP addresses as opposed to ranges, as this helps control costs. In addition, when pen testing
internal IP addresses, providing a sample representative set of hosts, instead of all possible hosts, is
recommended.
Threat Identification
Security Assurance
Risk Mitigation