Our battery of security management benchmarks are rigorous and uncompromising. Some of the high level analysis and performance evaluation stages that are conducted by the OnDemand Penetration testing include the following:

Reconnaissance encompasses passive and active reconnaissance tactics to identify and evaluate your network topology, active hosts, IP addresses, installed operating systems, open network ports, and all installed security devices.

Analysis entails performing application mapping, network scanning/fuzzing, and vulnerability analysis. It effectively identifies all applications running behind open network ports and their degree of potential vulnerability The Analysis stage typically involves running SQL Injection, Code Injection, Code Execution, Directory Traversal, and Cross Site Scripting against the web applications to expose any security anomalies.

Penetration employs the data derived from the Analysis stage to exploit the determined weak points of your network to attempt to gain access. Typically, the Penetration phase focuses primarily on vulnerabilities revealed for network services and externally facing web applications.

Information. This phase generates alerts once a vulnerability has been successfully exploited. A system restore is immediately performed to return the network to its previous state prior to the intrusion. A detailed report is generated on all areas of your enterprise for assessing how and why the intrusion was successful.

Finally, the Documentation phase reflects all testing results, all intrusions, the areas of the system that were compromised during an intrusion, intrusion-resistance recommendations, and qualitative analysis reports of each security mechanism employed on your network.