We can help you identifying unsafe code and exploitable vulnerabilities in your web applications and API's, vulnerabilities within your networks and devices accessible from the Internet, as well as internal servers.

We offer few different types of services (Black-Box, Gray-Box and White-Box).

Black-Box Penetration Testing is the type of testing that is the most realistic, but also has the greatest potential to overlook a vulnerability that exists within the internal part of network or application. During this testing we do not have any information provided by client what's behind the web application, network or any type of accounts. It's our mission to obtain the sensitive information needed to proceed, and find vulnerabilities.

Grey-Box Penetration Testing is the type of engagement when we have been granted some internal access and knowledge that may come in the form of low level credentials, application business logic or network infrastructure.

White-Box Penetration Testing is the type of testing which includes full access to source code of these applications, also high level credentials. Purpose of this type of testing is to identify poorly written code, misconfigurations, logical vulnerabilities.

In our penetration test reports we list all the tools and the exact commands used to achieve our testing results so that members of your internal team can replicate these and verify the system after patching discovered vulnerabilities.

Note, we do not provide physical penetration testing services (e.g. physically sneaking into your server room, playing rubber-ducky attack, delivering malicious hardware etc.), also we do not perform any type of social-engineering attack (e.g. impersonating someone over the phone to get sensitive information).