Vulnerability Assessment (VA)
Do you need to improve the security of business-critical systems and data?
Is compliance with regulations, the acceleration of potential threats, and a growing remote and mobile workforce challenging your organization to examine your ability to discover vulnerabilities and take measures to counter them?
Our VAS combines proven experience and open technology to ensure vulnerabilities are identified, analyzed and managed effectively, to minimize risk and maximize business results. The whole idea is to minimize or, better still, eliminate the chance of a security breach.
VAS uses a different approach to that of penetration testing. Instead of using real exploits and other means to get access to your systems, VA investigates your weakness in a non-invasive manner. Your network infrastructure is targeted but not penetrated, and no client information is obtained.
3-Level approach
In view of the complexity of typical networks, VAS focuses on an organization's vulnerability to attack:
- from the Internet,
- from compromised DMZ's and internal networks,
- from wireless networks.
Features & Benefits
• Ensures maximum protection for business-critical operations
• Provides the most cost-effective use of open technology and resources
• Enables clients to focus on core business functions
• Delivers an unparalleled picture of current vulnerability status
• Analysis of latest security threats to counteract the ever-evolving hacker community
• Access to industrial-strength best practices
Deliverables
A summary report is produced, highlighting:
- Ports open.
- The Services behind open ports.
- Version numbers of any identified software providing the Services.
- Identified vulnerabilities with the software versions, including details of where to obtain information.
- Susceptibility to illegal or mal-formed packets.
Upon identifying security weaknesses, invasive testing will be used to determine the nature of vulnerabilities, without causing any Denial of Service (DoS). We investigate further to see whether, and how, potential vulnerabilities can be exploited.
Each vulnerability is then documented, together with an analysis of risk and details of whether the vulnerability is demonstrable and repeatable.
Want to know more? Contact us now! |
