Our consultants have accumulated years of experience of performing penetration tests on applications. We simulate an attack on your application as a real hacker would in various ways.
Black Box Penetration Test
Our most basic service, which is the most commonly offered by security consultancies. We probe your application’s defenses from the outside and attempt to subvert its controls, bypass its business rules of operation and take control of it.
White Box Application Test
A much more comprehensive service than the Black Box. We perform the same tests but couple them with a “lightweight” code review. We review your code for the most common security vulnerabilities, such as Cross Site Scripting, SQL Injection, Code Execution, Cryptographic problems and many others. This is the service we sell the most, and a way to get very quick “wins” if you are trying to improve your applications’ security stance. It is also the method we use to find many vulnerabilities in proprietary and commercial software.
If you would like a more thorough and complete code review to find up to 100% of all the vulnerabilities in your code, we also have a service for that.
Specialised services (Reverse Engineering and Fuzz Testing)
We also provide a range of more specialised services that can assist you in finding vulnerabilities. We are experts in fuzzing technologies and also in reverse engineering. Lost the source code for an old application and need to interact with it? No problem. Need to perform security testing on a third party product? No problem!