Penetration Testing
DarkCode’s penetration testing services are designed to simulate real-world attacks on your organisation’s IT systems, applications, and networks. Identify your gaps before the bad guys do with our dedicated team of consultants located in Hong Kong.
SERVICE TYPES
Our Penetration Testing Services
Web Applications/API Testing
Web application testing analyses your application’s code to identify security flaws, preventing exploitation in the wild. We identify complex flaws like business logic, injection, authentication flaws or privilege escalation.
Mobile Application
Mobile application assessment prioritizes data privacy with by the Open Web Application Security Project (OWASP) and other emerging industry standards. Ensure data is handled and protected against unauthorized access.
Wireless Network
Wireless testing identifies security issues in your Wi-Fi networks, preventing unauthorized users from sneaking onto your internal network. Ensure no one in the vicinity is snooping on you.
Active Directory
Active Directory testing identifies weaknesses in the enterprise environments that could lead to privilege escalation and domain dominance. Hybrid approach to identify access control weaknesses and misconfigurations.
Thick Client
Thick-client testing covers all layers from the client-side to data in transit and server-side. In-depth analysis of your thick-client application will be performed to identify and exploit vulnerabilities.
Infrastructure
Evaluation of your network, IT infrastructure, cloud environment, and servers to raise awareness about vulnerabilities and the effects of exploitation, as well as end-user adherence to security policies.
Supported Web Application Testing Approaches
DarkCode’s web application penetration testing services support the following testing approaches when assessing web apps:
Black Box
Most Real-life alike
Cons
Grey Box
Best balance of time and results
Cons
White Box
Reveal the most vulnerabilities
Cons
OUR DELIVERABLES
What will you get?
All findings will be documented in a final report, which will be evaluated against a strengths and weaknesses profile aligned with international IT and Cyber Security standards. Identified weaknesses will be assessed and accompanied by prioritized recommendations and remediation actions based on associated risks.
The final report will be presented to you, featuring a comprehensive C-level summary of the security audit or penetration test conducted. Additionally, it will include detailed results, supporting evidence, and recommendations for future security enhancements.
You’ll also enjoy –
Remediation Assistance
Explanation Call with Dev/Fixing Team if required
Re-assessment
Complementary Re-Test within four months of Initial Report Submission
FAQ
What is different between Penetrating Testing and Vulnerability Scanning?
Penetration testing simulates real-world attacks to identify and exploit vulnerabilities, providing a detailed assessment of security weaknesses and their potential impact. In contrast, vulnerability scanning automates the identification of known vulnerabilities without actively exploiting them, resulting in a broader but less detailed overview.
Ultimately, penetration testing delivers deeper insights and actionable recommendations, making it a more effective approach for enhancing security posture.
How much does a penetration test cost?
It depends on the scale of the scope. That’s said, most of the penetration tests we perform fall within the range of HKD$30,000-$80,000. Reach out for your quote today!
When can you start the assessment?
We have to confirm the scope, your expectations and concerns before kickstarting the assessment. Once everything is solved, we can start immediately upon approval of our proposal.
Can you perform a test for my ISO 27001/PCI DSS audit?
Yes, our testing protocols surpass the guidelines recommended by the PCI Standards Council and ISO/IEC.
Do you guarantee my assets are completely secure after the assessment?
Arguably nothing can guarantee 100% security. However, penetration testing forms an integral part of a comprehensive security strategy and make your assets much much harder for hackers.
What is the expected outcome of a penetration test?
We uncover the unknown unknowns in your cyber assets! This is typically in the form of a detailed report that contains discovered vulnerabilities, their potential risks, and remediation recommendations.
We also include a comprehensive C-level summary so that you may present the results to your boss much more readily 🙂
Ready for a Pentest Quote?
Simply fill out and submit the form, and we’ll provide you with a quote shortly
Address:
West Wing, 2/F, 822 Lai Chi Kok Road, Cheung Sha Wan, Kowloon