Identify weaknesses before attackers exploit them
Test security before an attacker does
Penetration testing evaluates security from the perspective of a realistic attack. Rather than simply listing technical findings, it assesses whether weaknesses can be exploited and what the resulting impact could be in the customer’s particular environment.
Technical, social-engineering and physical testing
VIAVIS conducts external and internal penetration tests, mobile application testing, social-engineering assessments including phishing and vishing, and tests of physical and personnel security.
Where appropriate, we can design a tailored scenario combining several attack methods.
Findings you can act on
The deliverable identifies weaknesses, their severity and recommended remediation. Objectives, scope, rules of engagement and permitted techniques are always agreed with the customer before testing begins.
Security with measurable value
External penetration testing
Assess systems and services exposed to the public internet.
Internal penetration testing
Examine security from the perspective of an attacker with access to the internal environment.
Mobile applications
Test the security of mobile applications and related interfaces.
Phishing and vishing
Use controlled social-engineering scenarios to assess user behaviour and preparedness.
Physical intrusion testing
Assess physical and personnel safeguards within a pre-agreed scope.
Tailored scenarios
Combine testing methods to address specific risks and customer objectives.
Common questions
What is the difference between vulnerability scanning and penetration testing?
Automated scanning identifies known technical vulnerabilities. Penetration testing also involves expert assessment of exploitability, context and possible impact in the given environment.
Can employees be included in testing?
Yes. Social-engineering scenarios such as phishing and vishing may be conducted by prior agreement.
Do you perform physical penetration tests?
Yes. Examples include controlled attempts to enter restricted areas, attention tests and scenarios involving non-public information.
Is the test scope agreed in advance?
Yes. Objectives, scope, permitted techniques, timing and contact persons are agreed before work starts.