MANUAL PENETRATION TESTING
Automated scanners are great for identifying vulnerabilities, but penetration tests depend on humans to replicate the attacker mindset when looking at your IT assets. Automated tools do produce quick results but are not exhaustive. A human tester executes manual test cases involving custom tools, scripts, exploits, etc. These efforts should result in the discovery of security gaps that would otherwise be missed. Breachlock™ makes use of both automated and manual penetration testing to ensure you get the best results and can remediate all vulnerabilities.
Besides manual penetration testing, BreachLock™ also has artificial intelligence aided network and web scanning capabilities. Our web scanner targets and finds common vulnerabilities which affect web applications: SQL injection, XSS, OS Command Injection, Directory Traversal, web server configuration issues to name a few. Our network security scanning capabilities give you capabilities such as continuous network mapping and vulnerability discovery.
INDUSTRY STANDARD METHODOLOGY
Penetration testing methodology and standards are central to the success of any 3rd Party Penetration Testing engagement. Appropriate methodologies and techniques can help security professionals evaluate information security measures in the right and accurate manner. We follow OWASP and OSSTMM.
BreachLock™ provides in-depth reporting and quality documentation to meet industry standards and compliance requirements. Our example reports of each of the services you need (network, web app, mobile, etc) will ensure you fully understand what to expect as an output of the process. You can also share these sample reports with your auditors to ensure that our final reports will be acceptable to them.