Information Security is a constant race between searching for weaknesses to exploit and defenders working to secure them. New vulnerabilities – weaknesses that may be exploited by an attacker – are discovered every day. Vulnerabilities, including missing patches and misconfigured applications, expose weaknesses to attackers and open organizations to costly cyber-attacks. In order to secure their IT assets, organizations today must maintain an awareness of the vulnerabilities in their environment and respond quickly to mitigate potential threats. One way to do so is through regular vulnerability assessments, a process to identify and quantify the security vulnerabilities in an organization’s environment.

A vulnerability assessment program provides organizations with the knowledge, awareness, and risk background necessary to understand threats to their environment and react accordingly.

A Penetration test (Pen-Test) attempts to exploit the vulnerabilities identified during Vulnerability Assessment to determine whether unauthorized access or other malicious activity is possible.

As part of Vulnerability Assessment and Penetration Testing, we perform a detailed analysis on the current architecture, internal security of system components and identify all vulnerabilities by using a phased approach to ensure that malicious intruders do not gain the access to critical assets stored, processed or transmitted.

IT Security Compliance regulations and guidelines (PCI DSS, GLBA, NCUA, FFIEC, HIPAA, etc.) require an organization to conduct independent security testing of the organization’s IT Infrastructure to identify vulnerabilities, that could result in unauthorized disclosure, misuse, alteration, or destruction of confidential information, including Non-Public Personal Information (NPPI).

We follow a highly structured process for vulnerability assessment: