External Penetration Testing

To ensure the security of your network, we begin by implementing Internet-connected devices on your network. NopSec’s Internet security consultants identify and thoroughly test potential points of attack after enumerating every live host, open port, and available service. These vectors are often found in routers, firewalls, DNS servers, web servers, database servers, and even legacy hosts that have no Internet-related business purpose. We’ll work to identify all vulnerabilities, focusing on the areas that present the highest risk to your business. We have a solid understanding of security-related policies and regulations, particularly for e-commerce and finance applications. Our analysis is performed with no disruption to your organization, with minimal impact on staff productivity.

Footprint Analysis and Information Gathering

The Footprint Analysis and Information Gathering phase results in a detailed blueprint of your company's network and Internet security profile—the two major components that determine your network's overall risk. Our Internet security consultants begin the footprinting process without significant knowledge of your company's network, allowing us to achieve thorough mapping and perceive any blind spots. We gather domain names, IP network ranges, and detailed host information, such as operating systems and applications.

Vulnerability Scanning

The information gathered during the Footprint Analysis and Information Gathering phase is used to perform comprehensive Vulnerability Scanning to penetrate your most susceptible systems. NopSec takes a holistic view of your system, linking multiple, low-risk vulnerabilities to achieve a seamless access into the target network. This linking strategy is effective in pilfering sensitive data, such as password hashes and restricted databases, and attaining specific trophies your company identifies.

Penetration Testing

Our penetration testing provides the industry’s most thorough, reliable defense against Internet security threats. NopSec security consultants scrutinize Internet systems for any potential weakness or vulnerable information that could be used to disrupt the confidentiality, availability, or integrity of your online systems.

NopSec's Penetration Testing methodology is divided into two essential phases to ensure our comprehensive, detailed understanding of your company’s network, giving us the insight we need to protect your most important assets.

For organizations that require a more sophisticated level of penetration testing, we also offer a variety of advanced options, including social engineering, denial of service testing, IDS/incident response validation exercises, and more.

By performing a penetration test as a sub-component of the External security Assessment, we’ll provide you with dual layers of protection. This premium service allows you to determine if your network can be penetrated from the outside, providing you with a comprehensive list of all security vulnerabilities on your perimeter network.