Our battery of security management benchmarks is rigorous and uncompromising. Some of the high-level analysis and performance evaluation stages that are conducted by the OnDemand Penetration testing include the following:

Reconnaissance encompasses passive and active reconnaissance tactics to identify and evaluate your network topology, active hosts, IP addresses, operating systems, open network ports, and all installed security devices.

Analysis entails performing application mapping, network scanning/fuzzing, and vulnerability analysis. It effectively identifies all applications running behind open network ports and their degree of potential vulnerability. The Analysis stage typically involves running SQL Injection, Code Injection, Code Execution, Directory Traversal, and Cross-Site Scripting against the web applications to expose security anomalies.

Penetration employs the data derived from the Analysis stage to exploit your network’s determined weak points to gain access. Typically, the Penetration phase focuses primarily on vulnerabilities revealed for network services and externally facing web applications.

The informational phase generates alerts once a vulnerability has been successfully exploited. A system restore, immediately returns the network to its previous state before the intrusion. In addition, a detailed report is generated on all areas of your enterprise to assess how and why the intrusion was successful.

Finally, the Documentation phase reflects all testing results, all intrusions, the areas of the system that were compromised during an intrusion, intrusion-resistance recommendations, and qualitative analysis reports of each security mechanism employed on your network.