Types of tests we perform
| Test type | What is tested | Example of risk revealed |
|---|---|---|
| External | What is visible from the Internet: site, servers, exposed services | Forgotten service open to everyone |
| Internal | The network from the inside (compromised machine, visitor) | Lateral movement to the file server |
| Web application | Site and apps: authentication, inputs, sessions (OWASP Top 10 reference) | Injection, broken access control |
| Wi-Fi | Wireless network security | Weak password, guest network not isolated |
| Social engineering | Fake e-mails, calls: how your teams react | Credentials typed on a fake site |
A written framework before any action
Our process
- 1
Scoping
Goals, perimeter, rules of engagement.
- 2
Reconnaissance
Mapping what an attacker can see.
- 3
Exploitation
Controlled access attempts, with evidence.
- 4
Report
Proven weaknesses, severity, recommended fixes.
- 5
Retest
Verification that fixes work.
What the report contains
- An executive summary the management can understand.
- Each weakness with its proof, severity and business impact.
- Precise fixes, ranked by priority.
- A retest to confirm the fix.
Not sure what you need? Our guide audit or pentest helps you choose. For a broader approach, start with a security audit.
