{"id":3359,"date":"2019-10-21T12:12:02","date_gmt":"2019-10-21T10:12:02","guid":{"rendered":"https:\/\/wordpress-348070-1639297.cloudwaysapps.com\/pen-tests-you-need-to-know-about-this\/"},"modified":"2024-08-19T15:35:55","modified_gmt":"2024-08-19T13:35:55","slug":"pen-tests-you-need-to-know-about-this","status":"publish","type":"page","link":"https:\/\/www.cyber-security-online.nl\/en\/pen-tests-you-need-to-know-about-this\/","title":{"rendered":"Pentesting and Penetration Testing:
Everything you need to know about pen testing."},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Pentesting and Penetration Testing:
Everything you need to know about pen testing.<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

It is becoming increasingly important for companies and organizations to have pen testing<\/a> performed on their (web) application, website, IT infrastructure, interfaces (APIs) and\/or mobile apps. A penetration test (also known as a pen test) can reveal where the risks and vulnerabilities of the systems under investigation lie. In addition, improvements can be targeted to strengthen security to mitigate risks and vulnerabilities.<\/strong><\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

What exactly is a pen test?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

A pen test, or penetration test or penetration testing, is an important element within IT and organizational security. It is basically an authorized simulated attack on a computer system, carried out to evaluate vulnerabilities. Pen testing often involves the use of a penetration testing toolkit<\/i>. This toolkit contains various tools and techniques that help expose any weaknesses. The user, in this case the organization, uses the results of the pen test to get a better picture of the current security status.
\nThus, an effective security audit can be conducted to target security gaps. That’s why pen tests are so important; they provide insight into vulnerabilities that might otherwise be overlooked.<\/b><\/p>\n

A pen test at NFIR is performed by certified ethical hackers who examine your systems for vulnerabilities. The ethical hackers try to uncover weaknesses in systems in various ways. Through a combination of automated tooling and creativity, ethical hackers attempt to gain unauthorized access to information and\/or systems. A pen test is always<\/b> commissioned and authorized by the owners of the systems being tested. In fact, if there is no indemnification statement then there is computer infringement. After a pen test is performed, the findings are shared with the client through a report. This report describes in detail the vulnerabilities found, determines the scores using the CVSS (Common Vulnerability Scoring System) and provides advice on how to fix the vulnerabilities. It is recommended that a pen test be performed periodically, as a pen test is a snapshot in time<\/a> and environments are often subject to change.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Curious about a sample report from a Pentest?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tSample reporting Pentest<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t

\n\t\t\t\tThe pentest\t\t\t<\/h4>\n\t\t\t\t\t\t\t\t\t\t
<\/i><\/div>\n\t\t\t\t
<\/i><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t