Security & Penetration Testing

Best practice and conventional wisdom still specifies a penetration test every year, or after major changes. However, with today's vastly magnified threat scenario, with ever-greater focus on data loss, ID theft, and fraud, this is generally considered insufficient; despite the current economic climate, an annual penetration test must be the absolute minimum. To understand why this is so, consider that every year approximately 8,000 vulnerabilities are discovered in commercial software.

While most of these large number of vulnerabilities will probably not affect your organisation’s infrastructure, even if only one percent impact your environment, your organisation could be exposed to a significant risk (statistically twenty per quarter, or almost seven per month on average). Can you afford to wait up to a year to check for this eventuality?

Network & application testing services

As a CREST company, commissum’s methodology applies common and consistent methods that build on industry standards, including the Open Source Security Testing Methodology Manual (OSSTMM), the Open Web Application Security Project (OWASP) and the Council of Registered Ethical Security Testers (CREST).

Our services, accredited under the CREST scheme, provide you with a high level of assurance of the quality, expertise and professionalism of the penetration and security testing services that we provide.

Our services include, but are not limited to:

• Networks and Infrastructure, including wireless
• Web applications
• Monthly Managed Vulernability Assessments
• Mobile Device Testing
• Code Review

• Penetration Testing
• CREST Testing
• Application Testing
• Enterprise Application Assurance
• Network Vulnerability Assessment
• PCI DSS Testing
• Code Review
• Mobile Device Security
• Wireless Security