An external penetration test evaluates the perimeter security of your organization by simulating an attacker on the internet. The goal is to identify vulnerabilities in internet-facing systems, attempt to breach internal networks, or uncover publicly exposed information that could harm your reputation. (For more details, see our complete external penetration test guide.) Because it closely […]
If you are a level 1 merchant or service provider, or your acquiring bank views your organization as high risk, you must be compliant with the full Payment Card Industry (PCI) Data Security Standard (DSS). Additionally, in order to validate your compliance, you will be required to have a Qualified Security Assessor (QSA) perform a […]
As we have previously discussed, it is often times difficult to justify the budget and quantify the return on investment for a penetration test. While we always recommend ensuring your firm is conducting a reasonable amount of testing with a sufficient scope to maintain a stable security posture, we recognize that sometimes the budget and […]
Social Engineering is one of the most important tests you can have performed because it evaluates the largest risk to your organization. In 2018, 83% of organizations faced a social engineering attack, so it is very likely that this is a threat you are going to continue to see in the new year. Because of […]
Unfortunately the age old adage “you get what you pay for” has never been more true than in the penetration testing industry. We often hear from potential clients that are seeking a new penetration testing partner because they had previously gone with the cheapest quote and are now “paying the price” (pun intended). A response we […]
Perhaps an employee in your organization finds out that he or she is about to be fired and goes on a hacking spree. Or maybe Sally from accounting (sorry Sally) is always clicking on links that she receives in emails and you want to determine the risk to your network associated with that. An internal […]
As a small business ourselves, this is a question we can really relate to. Do you really need all this penetration testing? And even if I recognize it is important, can I even afford it? The fact is, as a small business, and especially as a startup, every single dollar is accounted for. Every dollar that is […]
Crazy variations in pricing between companies is one of the most common complaints we hear from clients comparing penetration testing quotes. This isn’t a new problem for the services industry as a whole, but it can be frustrating. Especially when you’re trying to compare services that are more technical in nature. Information security consulting engagements […]
Let’s remove some of the mystery behind how web application penetration tests are priced. One of our core tenets is honesty and transparency, so if we can clarify the process of scoping out a penetration test and help you understand how much a web application penetration is going to cost, it may make you more […]
Knowing the difference between a penetration test and vulnerability scan is critical to optimizing your resources and making sure you are taking the necessary steps to reach compliance, secure your network, and determine your level of risk. Penetration tests are far more expensive and may be more than you need, while vulnerability scans, while cheap, […]
