Penetration Testing

Evaluate your defenses before a hack

TraceSecurity Penetration Test is a test that mimics the actions of real-life invaders simulating an actual attack and exploiting weaknesses in security without the usual dangers involved. Conducting a penetration test is a valuable tool in evaluating your security and preparing your defenses. With this unannounced security assessment, security vulnerabilities and exposures will be identified and exploited. Various tools are used to gather publicly available information.

Nature of Activities
TraceSecurity Penetration Tests follow documented open-source, standard security testing methodology.

  • •  Network Scanning
  • •  Port Scanning
  • •  System Fingerprinting
  • •  Services Probing
  • •  Exploit Research
  • •  Manual Vulnerability Testing and Verification
  • •  Limited Application Testing
  • •  Firewall and ACL Testing
  • •  Intrusion Detection System Testing
  • •  Electronic Dumpster Diving (Document Grinding)

Project Evaluation and Reporting
The assessment results in an extensive report containing:

  • •  Executive Summary
  • •  Business and Technical Risks and Recommendations
  • •  Penetration Test Methodology
  • •  A list of vulnerabilities broken down into areas of concern
  • •  Details and exposure of vulnerabilities
  • •  Penetrations by areas of concern
  • •  'Capture the flag' results and successfully penetrated systems
  • •  Recommendations and counter measures