Vulnerability Assessments

We start by identifying all publicly accessible IP addresses, services and ports that may be used as attack vectors by hackers.  We then assess your systems for over 100,000 vulnerabilities and system weaknesses using a combination of commercial and open source vulnerability scanning tools.  We perform manual penetration testing to confirm exploitable vulnerabilities identified during scanning, identify vulnerabilities that automated tools are unable to discover, and identify false positives.

We utilize advanced open source intelligence gathering methods to discover sensitive information that you might be unaware is available to the public.  We notify you of publicly accessible files, documents, comprised accounts, code repositories, etc., giving you the opportunity to clean them up before they are exploited by an attacker.

Your customized vulnerability assessment report will include an executive summary of all activities performed, an overview of the methods and tools used, a detailed list of the vulnerabilities discovered, and remediation guidance to address all vulnerabilities.

As part of our Monthly or Quarterly assessments, we will tell you what has changed since the last assessment.   Our report will tell you the new vulnerabilities we discovered, the vulnerabilities from the last assessment that were addressed, newly active IP addresses, and IP addresses that are no longer active.