Penetration Testing

Unlike other penetration testing services which use automated tools to find system vulnerabilities and exploit them, our philosophy is to use this exercise as an opportunity to view your network and system environment from the perspective of an attacker.

Leveraging industry standards such as the Mitre ATT&ck Framework as well as the latest DHS exploit alerts as a guide, our penetration testers will evaluate your network— from both the internet and internally—making note of any vulnerabilities, sensitive data, and critical systems discovered along the way. Our efforts often culminate in the “ethical” compromise of one or more systems, followed by attempts to escalate privileges to those of a system administrator.

All of this information is ultimately collected and analyzed to provide a Penetration Testing Report. The Report is a critical component in assessing an organization’s security posture and prioritizing steps for remediation. Accord staff typically use a Penetration test report as a key component in building InfoSec Roadmaps for our clients.