Penetration Testing Services

Protection from Internet-bourne threats

It is easy to recognise the potential damage that security breaches can cause, not just in direct cost but often, more significantly, in reputational damage. And worse, the media (and management) are quick to point the finger and allocate blame following a data loss incident, even if this is unjustified.

It is now becoming standard practice to conduct security testing against elements of critical IT infrastructure, particularly for systems that are ‘Internet-facing’. The industry term for such testing is Penetration Testing, although this can take many forms depending upon the system to be tested, including:

• Conducting network tests from the Internet
• Assessing the infrastructure architecture and control
• Testing for specific application weaknesses
• Reviewing system code

Evolving, responsive security

As security threats are constantly evolving, it makes sense to conduct testing at least annually. To facilitate this, we have partnered with one of the longest established specialists in the field, ECSC, who provide services to a wide range of public and private organisations. ECSC offer their experience and expertise independent of our systems management.

Adapt works with you to address identified weaknesses and improve your security as an ongoing process.

Our systems specialists help you to interpret testing results, prioritise and implement remedies and plan for change.

Our approach

Adapt’s approach is designed to help you identify critical vulnerabilities, support your risk assessment activities and work with you to develop appropriate protection systems. This translates into evolving security protection that responds to new threats and protects your systems, information and reputation.

Testing

Adapt works in partnership with independent security consultants ECSC. With detailed knowledge of your infrastructure, we are well-positioned to immediately create a remediation plan for any vulnerabilities discovered during testing.

Where testing shows no high-risk vulnerabilities are present, ECSC will give you a Pass Certificate to use in your own marketing activities.

Penetration testing services are for you if:

• You manage and store confidential information
• Your clients/customers expect you to protect information they are sharing with you
• You have specific regulatory or contractual obligations to provide appropriate levels of security
• You need to support certifications, such as ISO 27001 and/or PCI DSS monitor your network traffic

Key benefits

• Confidence for you and your customers
• Independent expert testers
• Prioritised vulnerabilities with recommended remediations
• Adapt expertise to help you make improvements

Features

• Detailed reporting
• Prioritised, risk-based, vulnerability identification
• Adapt support to plan remediation
• Certificate of security to use in your marketing