Adversify pride themselves on the quality of our deliverables and during their careers, our consultants have worked with clients across major verticals such as finance, aviation, software, government and retail.
Adversify regularly conducts in-house research and development in order to provide the most complete and accurate service possible to our customers.
Adversify has experience delivering various different types of penetration testing projects ranging from web application and API assessments to complex, multiple-domain internal networks.
Adversify specialises in internal infrastructure and Active Directory assessments. We take a flexible approach to our security assessments, ensuring that our client's needs are met in their entirety.
A vulnerability assessment and penetration test are both effective at helping an organisation reduce its available attack surface. However, each exercise is unique in their own way.
A vulnerability assessment typically covers a vast amount of endpoints using mainly automated tools and techniques. This approach is useful at detecting known vulnerabilities, checking whether hardening settings have been applied and discovering open services.
A penetration test goes a step further. During a penetration test, a qualified security professional will also conduct manual testing alongside using automated tools and techniques. Within a penetration test, the consultant will often attempt to "chain" or combine vulnerabilities together in order to elevate its overall impact and demonstrate exactly how an adversary would do it.
Cyber attacks are increasingly more common in this day and age. If you utilise IT systems within your business, then penetration testing should be conducted regularly. Penetration testing can provide assurance that you are taking the necessary precautions to protect your business. By regularly conducting penetration tests, it allows you to keep abreast of any risks, along with the impact and likelihood of whether it would occur.
Scoping is the term coined to the process of gathering information about a Penetration Test, before a formal sales quotation is issued to a client. During scoping, we want to know as much information as possible. We want to know things like:
Essentially, we want your organisation to get the best value possible for your money. Therefore, we ensure that this phase is the very thorough, leaving no stone unturned.
Adversify will not intentionally cause disruption to networks, systems and applications during a Penetration test. Our default approach is to follow non-destructive testing methods and we do not actively test for Denial of Service vulnerabilities. Furthermore, we can put additional fail safes in place, such as setting a designated out of hours testing window, running the penetration test against a pre-prod environment instead of live and tuning down any automated tools as necessary.
