Penetration Test Policies

• Information Gathering
• Single Penetration Test
• Root Penetration Test
• Full Penetration Test
• Web application Penetration Test
• Complince Service

Vulnerability Policies

• Information Gathering
• Compliance: PCI-DSS, SOX, HIPPA, GLBA, FISMA, USGCB, FDCC, SAS70, ISO27001/2,

Compliance

NSAP IT  provides many solutions to help organizations comply with Standards and Regs

FREE DISCOVERY AND INFORMATION GATHERING SCAN

NSAP IT™ penetration testing services safely replicate real-world attacks against your IT systems, pinpointing your organizationʼs critical information security weaknesses in the most proactive and realistic way possible.   

• Work with skilled security professionals. Penetration testing engagements are conducted by highly experienced, CISSP- and CEH.

• Go beyond vulnerability scanning. Penetration testing services replicate attacks against your environment, both identifying exploitable vulnerabilities and revealing the potential implications of a related breach.

• Injection Flaws – assess applications against SQL injection and blind SQL injection attacks.    
• Cross-Site Scripting (XSS) – test and/or attack applications against URL-based XSS attacks.    
• Insufficient Transport Layer Protection – identify where weak levels of encryption expose your HTTPS.   

• Security Misconfiguration – assess web server and network infrastructure to identify other security issues.    

 
Our Ethical Hackers providing visibility into:

• Which systems are exposed
• What OS, service and application vulnerabilities pose real threats
• How privileges can be escalated on compromised systems
• What information could be accessed, altered or stolen
• How low-level network compromises can open paths to critical backend data
• Identify end users who click on links in malicious emails
• Test their systems for exploitable OS, service and application vulnerabilities
• Demonstrate how compromised endpoints expose other, more sensitive systems on your network
• Sniffing traffic to find streams of sensitive data
• Attempting to join cracked networks and compromise backend systems
• Pivoting from wireless to network testing in an attempt to access data on backend systems (requires Network Penetration Testing service)
• Gathering information on network strength, security protocols and connected devices

Penetration Test Brochure