Vulnerability Assessment / Penetration Testing (VAPT)

Vulnerability assessment and penetration testing (VA/PT) are ways to discover weak spots in the security of your website, (mobile) application, or infrastructure. This article describes this type of security test.

Discover more about VA/PT:

1. Vulnerability Scan & Assessment
2. Assessment Process
3. Penetration Testing
4. Difference Between Vulnerability Assessment and Penetration Testing
5. What can be Pentested?
6. Quality and Standards
7. Test Methods and Penetration Test Tools
8. Cost and Quote

With companies becoming more and more dependent on data, protecting this data is vital and often compulsory (i.e., when it comes to personal data). Authorized users access data through applications that contain business logic and security functions. If any weaknesses exist in these access layers, risks will arise to the business. In order to stay in control, it is necessary to assess the security measures by testing their effectiveness.

Request a Quote keyboard_arrow_right
Or contact us

Our vulnerability assessment and penetration testing service (also known as VA/PT) provides you with insight into the security risks of the environment in scope.

Our ethical hackers perform a security test to check the effectiveness of the implemented security measures, identify vulnerabilities and provide clear advice for improvement in a complete report with a concise management summary, an extensive risk analysis for each outcome, and recommendations on a strategic, tactical, and operational level.

Assessment Process

Secura follows a phased approach to all security assessments:

Phase 1. Preparation | Information Gathering

• Determine a complete overview of target systems in scope
  
• Designate technical & operational people
• Define scan frequency and timing
• Validate login details required for assessment
• Collect information on systems

Phase 2. Test | Analysis

• Assess which vulnerabilities can be identified through investigation
• Use tools and scripts developed by Secura
• Security specialists manually check for 'false positives' in raw data and potential vulnerabilities

Phase 3. Report | Explanation

• Writing and reviewing the report
• Present, discuss and review findings together with the client

Phase 4. Optional Retest | Periodic Follow-up Scans | Delta Reports

• Retest or perform automated periodic vulnerability scans after manual penetration tests