Network and Infrastructure Penetration Testing

URM is able to perform an internal or external infrastructure penetration test against all IP addresses associated with your organisation, location or service (e.g., remote access via a VPN or web application).

By performing unauthenticated external penetration testing services, URM is able to determine what information and services are publicly accessible.  The first step in this assessment is for URM to determine the public services and look to fingerprint the application to determine if the running application is vulnerable.  This includes services running on the public IP addresses e.g., remote access solutions such as Citrix, FTP servers, VPN access for remote administration of infrastructure. The test can include reviewing the web services for OWASP (Open Web Application Security Project) top ten vulnerabilities on any publicly available pages (e.g., login pages)..  

For an internal test, URM can simulate threat actors within your internal network and determine the impact and the risk to your organisation.   URM can perform authenticated or unauthenticated testing on your internal network, perform build reviews, review firewall rulesets, test your wireless networks, perform segmentation testing and work with you to design something which is both tailored and appropriate to your organisation.

‍

Why URM?

As a CREST-accredited organisation, URM is able to provide reassurances that all the policies, processes and procedures which underpin its cyber security penetration testing have been independently assessed and deemed to be fit for purpose.  Furthermore, accreditation to the CREST OVS programme reflects URM’s commitment to employing highly skilled individuals who are able to deliver Level 1 and Level 2 ASVS and MASVS assessments for web and mobile applications.  With its CREST penetration testing URM is able to support you through the whole penetration testing process, providing support during all the phases of the project. URM’s expert team will assist you during the scoping phase, provide regular updates during the assessment, provide a debrief meeting at the end of the assessment and help you through the remediation process.

URM fully understands that the objective of penetration testing is to reduce the risk affecting your organisation’s assets. That is why URM includes a free retest of any high or critical vulnerabilities identified during an assessment in the first 30 days after the assessment, to ensure the highest risks are mitigated as quickly as possible.

One of the major differentiators between URM and other penetration testing organisations is its holistic approach. Not only can URM provide cutting edge pen testing services, but with its governance, risk and compliance background can also provide a whole plethora of policy, process and training solutions to address your security weaknesses.  Furthermore as a Payment Card Industry Qualified Security Assessor Company (PCI QSAC) URM has teams which can provide assessment (RoC) consultancy and PCI penetration testing services.

‍