Penetration Testing of Infrastructure

The purpose of security tests is to determine current level of security, recommend mitigations, and suggest processes that will help to avoid similar issues in the future. Each company’s infrastructure changes regularly. It is not only new servers but also new users, new connections and new authentication methods – each new component extends the attack surface and increases the number of potential attacks.

To secure your infrastructure environment and the stored data, we offer the following services:

• External penetration tests – identification and testing of vulnerabilities that may pose a risk of compromising the internal infrastructure.
• Internal penetration tests – determining an internal attack surface with emphasis of Active Directory and abusing or bypassing defence mechanism like LAPS, Advanced Threat Analytics, JEA, WSL, RBCD, WDAC, ASR, AWL, Credential Guard, CLM, virtualization and more.
• Cloud infrastructure penetration tests – such as Amazon Web Services and Microsoft Azure. It is similar to external penetration tests however, it includes provisioning and management mechanisms specific to cloud environments.Please contact us to get a quote for infrastructure security testing. To assess the size of your infrastructure and the effort required to cover all attack vectors according to your expectations, we perform a scoping meeting.