What are DNS Zone Transfers? DNS Zone transfers. As ancient as the vulnerability may seem, it is imperative for cybersecurity professionals to maintain a vigilant watch for the simple yet compromising weakness in their systems. To be sure, most organizations have taken the necessary steps to mitigate zone transfers to unknown hosts since the 1990s. […]
One of the questions we often get when scoping out external penetration tests is “Can this testing be conducted after-hours or outside of regular business hours?” And while the answer is always “yes, we can do that,” some organizations aren’t aware of the trade-offs and risks here, so they may be signing up for a […]
This week we’re going to look at the differences between an External vs Internal Penetration Testing. Our primary goal will be to give you the information you need to be able to choose between these two basic types of penetration tests based on their value to your organization. Of course, the easy answer would be, […]
A common theme for many of the External Penetration Tests that we do is unnecessary attack surface exposed to the Internet. So what is your Internet attack surface? How do you reduce it? And why is this even important? These are all great questions and seemed like a useful topic to cover in a little […]
External penetration tests are one of the most common tests we perform. An external penetration test is often the starting point for any company that is trying to understand their risk. With numerous compliance regulations either requiring external penetration tests or “highly recommending” them, we get to perform a lot of them. As such, we […]
An external penetration test is a type of security assessment that can evaluate the resiliency of your organization’s network perimeter. It’s widely considered to be one of the first types of assessments that most organizations will go through, as most are concerned with tackling their Internet-facing weaknesses first. And that makes sense, as you don’t […]
One of the primary questions we get from customers considering our services is about our external penetration testing methodology. This is a great question, and usually is an indication that our potential customer is doing their due diligence. After all, you are about to let someone hack your perimeter, it would probably be good to […]
One area of confusion we run into every once in awhile centers around whether an external penetration test includes web application testing. Customers want to know if the external penetration test we are doing on their perimeter will also include web application testing for the systems in scope. The reason this can cause confusion is […]
While everyone hopes that when they have a third party come in to conduct an external penetration test everything goes according to plan, the honest truth is that sometimes, that’s just not the case. There are a litany of issues that can pop up during penetration testing in general. While 95% of the time things […]
An external penetration test is designed to test the perimeter security of your organization. This test takes the role of an attacker from outside trying to breach your network, compromise your Internet-facing hosts, or discovering sensitive information on public assets that may damage your company’s reputation (for more information, read our complete external penetration test […]
