If you are reading this, I am sure that at some point you have had to suffer through some form of security awareness training. While we commend companies for trying, let’s face it, the majority of participants are just clicking through some computer-based training as fast as they can so they can get their certificate […]
We often get asked for references for our work. As you would expect, if you are hiring someone to hack your company or determine where your security vulnerabilities lie, you want to make sure they can be trusted. As part of the screening process, we highly recommend that you vet penetration testing partners via professional […]
Should I go with a local testing company or someone outside of my geographical area? As with most things, the answer is “it depends”, however, the majority of assessments can be tackled remotely. By allowing penetration testing firms outside of your immediate location the opportunity to win your business, you can potentially open the door […]
Many of our clients are getting penetration tests not only to improve their security posture, but also to use the results to satisfy a client’s requirements or integrate the results into their sales materials. We get asked quite often how other organizations handle communicating penetration testing results, while avoiding divulging sensitive information. Below, we highlight […]
One of the common questions we get asked is how to effectively communicate penetration testing results to senior leaders, including C-suite executives and the board of directors. Below are some pointers on how to best navigate these often slippery slopes. Communicating Good Results Your penetration test came back and your firm performed exceptionally well, with […]
We often get asked, “Why should we go with your firm, you seem smaller than your competitors?” We take pride in being a small penetration testing firm, and it comes with many advantages that can ultimately help our clients. Advantages Cost savings – As a small business, we’re able to keep overhead expenses down and ultimately […]
The term “Rules of Engagement” sounds intimidating the first time you hear it, but don’t be alarmed, it is meant to protect both you as the client and your penetration testers. The Rules of Engagement, or ROE, are meant to list out the specifics of your penetration testing project to ensure that both the client […]
We often get asked, “what is the typical timeline for a penetration test?” The projected schedule can often dictate the business decision around which penetration testing firm to ultimately go with. When you’re under a tight deadline, it’s helpful to get a better idea of what to expect when contracting for a penetration test. While […]
Unfortunately the age old adage “you get what you pay for” has never been more true than in the penetration testing industry. We often hear from potential clients that are seeking a new penetration testing partner because they had previously gone with the cheapest quote and are now “paying the price” (pun intended). A response we […]
The phrase “partnering with you” is such a simple phrase, but it can have many different meanings. We do not view a partnership as providing someone with an 800 number or a line that goes to a corporate tree. We do not believe a partnership has an expiration date that corresponds with the last day […]
