Automated Accredited Penetration Testing
This service offers a comprehensive solution for organisations to perform automated accredited infrastructure and web application penetration tests in order to identify and help to mitigate potential security risks to the organisation resulting from key applications vulnerabilities. The sevice can enable security flaws within your network perimeter to be identified before they are exploited by a malicious attacker or internet worm.
Penetration tests are often viewed as lengthy and laborious processes requiring dedication of resources. This service enables administrators to schedule the tests for a suitable time, requiring no interaction with the system as they are completely automated.
Some of the key features of this service include:
- Provides on-demand report of potential vulnerabilities for in-house developed web applications without the need for expensive consultancy.
- Specifically designed modules to test for common vulnerabilities used by automated attacks such as worms and trojans.
- Ability to scan web applications and/or infrastructure for vulnerabilities.
- Can help determine the overall security posture of the organisation.
- Results displayed online or can be downloaded in PDF, XML or LATEX formats.
- Web based user front end for easy administration and can be easily scheduled to run on a quarterly basis.
- Continually updated vulnerability database.
- No requirement for a specialist to be on site to run these test which significantly reduces costs.
- Reports can be used for audit compliance purposes.
- Provides instructions on how to secure any discovered vulnerabilities.
- Backed by professional advice from ESISS consultants if assistance is required in interpreting results or discussing mitigation options.
The scanner is delivered by ESISS exclusively to the education sector in the UK and is provided by SEC-1 who specialise in web application security assessment and are a Council of Registered Ethical Security Testers (CREST) member organisation.
Depending on the number of tests required during a year, prices range from £275/year for up to 15 tests and up to £3000/year for an unlimited number of tests.
For more information please contact us through the details in the left hand contact box where a member of ESISS staff will be happy to take you through the details of the service or arrange a demo.
Further details on the scanner can be found on our FAQ page (https://www.esiss.ac.uk/faq/)