Modern Cyber Security. Built for Resilience.

Vulnerability scanning is usually performed in an automated fashion, identifying known vulnerabilities in the target assets.

A penetration test is performed by a qualified human being, carrying out manual test cases which can uncover more complex and subtle types of vulnerabilities.

Black box testing involves zero prior knowledge of the target system and is a realistic way to simulate an external adversary.

White box testing involves full knowledge of the target system, code and business processes. This is a good approach for getting the maximum possible coverage and depth.

Grey Box testing involves some level of initial access or a low privilege account. This is a good approach for simulating a compromised account or insider threat and provides a good balance between black and white box testing.

Often an annual penetration test is required for risk and governance purposes or compliance with certain frameworks such as ISO27001 and PCI-DSS.

Penetration testing is also a valuable and proactive way to identify and remediate vulnerabilities before a data breach or ransomware attack occurs.

Reach out to us and Redshift will walk you through the various options and make recommendations for the maximum value and coverage depending on your requirement and budget.