The comprehensive penetration testing services provided by TrilogySecurity mimics an attacker seeking to access sensitive assets by exploiting online security weaknesses existing across multiple systems. Our invaluable service not only identifies individual vulnerabilities, but also reveals how networks designed to support normal business operations can provide attackers with pathways to backend systems and data.
The Weakest Link
During the engagement, we begin by assessing your network or application infrastructure's "weakest links," as well as other possible avenues of attack. We then determine the ramifications of each compromise by attempting to escalate privileges on the entry points and pivoting the assessment to determine whether any other systems can be subsequently targeted and breached. This service typically includes the following components:
External or internal network penetration tests against critical assets.
Social engineering and client-side penetration testing to assess end-user susceptibility to phishing and other social engineering threats.
Web application vulnerability assessment and penetration testing (2 applications).
Optional Add-Ons
Wireless Penetration & Security Testing
Physical Security Assessment and Testing (Social Engineering Expansion)
Additional Web Application Vulnerability Assessments and Testing
Multi-Location Assessments and Testing
Internal Vulnerability Assessment
Physical Security
Physical access to facilities is as critical as online threats. TrilogySecurity provides assessment services to identify physical vulnerabilities in the security of your organization's facilities, monitoring services, and controls while also attempting to assess the security of the internal computer systems. This service is part of the social engineering engagement process. Please contact us for additional information.
Web Application Security Assessment
Our web application vulnerability assessment and testing service attempts to identify vulnerabilities within your web applications using various techniques, methodologies, and tools. Within the process of the web application testing engagement, our IT consultants:
Reveal security vulnerabilities resulting from implementation errors.
Expose weaknesses stemming from the application's relationship to the rest of the IT infrastructure.
Assess application security versus real-world attacks via a variety of manual techniques.
Identify security design flaws.
Increase end-user confidence in the application's overall security.
Identify OWASP (Open Web Application Security Project) top 10 vulnerabilities.
