A penetration test is a form of ethical cyber security assessment designed to identify and safely exploit vulnerabilities affecting computer networks, systems, applications and websites so that any weaknesses discovered can be addressed in order to mitigate the risk of suffering a malicious attack.

While a vulnerability scan uses only automated tools to search for known vulnerabilities, a penetration test is a more in-depth assessment. Pentesting utilises a combination of machine and human-driven approaches to identify hidden weaknesses.

Penetration testing is conducted by XcellHost’s experienced red team of CREST accredited ethical hackers who possess an in-depth understanding of the latest threats and adversarial techniques.

Penetration testing utilizes the tools, techniques, and procedures used by genuine criminal hackers. Common blackhat methods include phishing, SQL injection, brute force, and deployment of custom malware.

The time it takes an ethical hacker to complete a pentest is dependent upon the scope of the test. Factors affecting duration include network size, if the test is internal or external facing, and whether network information and user credentials are shared with XcellHost prior to the pen-testing engagement.

All businesses are advised to conduct a penetration test at least once a year, as well as after any significant upgrades or modifications to the company network. Given the rapid rate at which new exploits are discovered, XcellHost recommends that quarterly tests are performed. Regular penetration tests are often required for compliance with regulations such as PCI DSS.

XcellHost is a member of CREST, an international certification body for information security and pen-testing. By choosing our CREST penetration testing services, you can be sure that all assessments will be carried out to the highest technical and ethical standards. Our CREST certified penetration testers hold a range of cybersecurity certifications, demonstrating their ability to perform many types of penetration testing.

After each engagement, the ethical hacker(s) assigned to the test will produce a custom-written report, detailing and assessing the risks of any weaknesses identified plus outlining recommended remedial actions. A comprehensive telephone debrief is conducted following the submission of the report.

Many types of penetration testing can be performed remotely via a VPN connection, however some forms of assessment, such as internal network pen tests and wireless pen tests, may require an ethical hacker to conduct an assessment on site.

An XcellHost penetration test is conducted in accordance with the strictest legal, technical ethical standards. Tests are designed to identify and safely exploit vulnerabilities while minimizing the risk of disrupting business operations.