Providing you with the knowledge to assess your defenses

All IT systems can be targeted by and must be assessed regularly for their ability to defend against attack. Penetration Testing services by IPSec will provide you with the knowledge needed to properly assess the likely risks.

IPSec’s penetration testing services provide a structured set of assessments that will provide a real-world view of your organisation’s IT environment cyber-security capabilities. IPSec’s team of experienced security auditors will use leading tools and techniques to identify points of potential vulnerability and will validate the degree to which you are vulnerable to exploitation.

Where an issue is identified, IPSec will provide you with detailed reporting, providing a clear understanding and direction for the mitigation and remediation of identified threats. IPSec will provide detailed reporting, compliant with industry risk management standards, and business risk management reporting useable by your organisation’s audit committee, senior management, and executives.

Upon conclusion of the penetration testing engagement, you will have a clear understanding of the threats facing the assessed solutions, how those issues can be remediated, and what level of risk they present to the organisation.

External Testing

IPSec will simulate an attack from the Internet against your Internet facing IT infrastructure.

Using both automated tools and manual techniques IPSec will identify areas of weakness and vulnerability in exposed services that may permit unauthorised access to your intellectual property.

Internal Testing

Acting as both authorised and unauthorised users of your internal IT network environment, IPSec will simulate hostile behaviours attempting to obtain access to information and/or IT systems without appropriate permissions.

Wireless Testing

Wireless networks present many opportunities for bad actors to target the organisation’s IT environment. Whether its inadequate authentication mechanisms, configuration errors, or poor network segmentation all can cause intellectual property to be leaked wirelessly and silently.

IPSec offers a full range of wireless network security assessments.

Web Site/Application Testing

As the public face of the organisation and/or the principal point of regular contact with customers, web sites & applications are of primary importance for the protection of the organisation’s and its client’s confidential information. Equally so with internal web sites and applications that contain sensitive information important to the ongoing success of the organisation.

IPSec’s uses automated tools and manual methods, to identify and scope threat vectors, and to recommend remediation techniques. Web Application Testing is performed against the OWASP guidelines.

Mobile Application Testing

With so much confidential content accessible via mobile device appropriate testing of mobile applications is more critical than ever.

IPSec’s team of consultants can assess your mobile applications for potential security breaches and recommend ways to close them down.

Phishing Attack Simulation

Phishing emails are a constant threat. Your users need to be able to spot malicious emails or your organisation risks experiencing a serious cyber security incident.

IPSec will work with you to create a custom phishing campaign for your organisation, using the same techniques as the attackers.

The Phishing Attack Simulation service will measure the level of security awareness of your users. You will be provided with a detailed report highlighting areas of vulnerability related to user email behaviour.

Perimeter Breach Simulation

IPSec's Perimeter Breach Simulation service replicates the current attack techniques that are being used in the wild. Email based techniques are a common method that attackers use to breach the perimeter and gain a foothold on the internal network. Once inside your network, attackers can deploy ransomware which can cripple business operations or exfiltrate sensitive information causing reputational damage.

A Defense-in-depth approach is required to prevent serious cyber security incidents. This service will test the effectiveness of your technical controls such as endpoint protection and mail content filters, as well as user susceptibility to social engineering attacks.

IPSec will report on your readiness to repel the most sophisticated attackers and provide detailed steps on how to remediate any identified issues.

Contact us for a free consultation on how IPSec can help you.