Security Testing

Security testing services for network infrastructure & applications

Best practice and conventional wisdom used to specify a penetration test every year, or after major changes. Today, however, we face a vastly magnified threat scenario, with ever-greater focus on data loss, ID theft, and fraud.

This means that, despite the current economic climate, an annual penetration test must be the absolute minimum. To understand why this is so, consider that every year approximately 8,000 vulnerabilities are discovered in commercial software.

While most of these will not affect your organisation’s infrastructure, even if only one percent impact your environment, your organisation could be exposed to twenty vulnerabilities per quarter, or almost seven per month on average. Can you afford to wait up to a year to test them?

Network & application testing services

As a CREST company, commissum’s methodology applies common and consistent methods that build on industry standards, including the Open Source Security Testing Methodology Manual (OSSTMM), the Open Web Application Security Project (OWASP) and the Council of Registered Ethical Security Testers (CREST).

Our services are accredited under the CREST scheme, providing you with an assurance of the quality, expertise and professionalism of the penetration and security testing services that we provide. Our services include, but are not limited to:

• Networks and Infrastructure, including wireless
• Web applications
• Monthly Managed Vulnerability Assessments

• Application Testing
• Enterprise Application Assurance
• Penetration Testing
• CREST Testing