Overview
Think like an attacker. Defend like an expert.
Proton's attack and penetration testing services protect sensitive data and systems, helping you avoid costly breaches, intellectual property loss, business disruption and reputational damage.
With an expanding threat landscape, it is critical to understand security vulnerabilities, their root causes and remediation options. Using advanced penetration testing expertise, we identify vulnerabilities and provide actionable remediation guidance.
Assuming an “attacker mindset” to replicate any scenario, we combine best-in-class commercial security tools, leading freeware, top open-source tools and the latest testing techniques.
Applications, services, databases, the Internet of Things (IoT) and mobile devices, whether on-premise or in the cloud, are safer with Proton.
What we do
Our testing capabilities
Red Team and Adversary Simulation
Simulate real-world threats and attacks against the people, technology and processes that secure your systems, while assessing your ability to identify, detect and respond.
Application and Software Security
Custom-built or off-the-shelf, we identify security weaknesses in the design, development and deployment of business-critical web, mobile and thick-client applications.
Infrastructure Penetration Testing
Identify critical network and infrastructure vulnerabilities, misconfigurations and weaknesses that an attacker could exploit.
Security Configuration Review
Threats can be external and internal. Gain insight into misconfigurations that could be exploited from inside, and potentially outside, your organisation.
Social Engineering
Simulating a bad actor, we use physical, electronic and telephone methods targeting employees and facilities to identify how data and networks could be accessed.
Cybersecurity M&A Due Diligence
Gain a deeper understanding of the cybersecurity maturity of an acquisition target, pre- or post-acquisition.
Our approach
The S.P.I.D.E.R approach to penetration testing
Drawn from years of infrastructure and application testing, our six-stage approach is proven over time, gives clients clarity on what happens behind the scenes, and has been recognised by our clients.
Sample
Sampling allows focused-scope testing of infrastructure and applications, with scenarios to test, credential validation and clearly defined objectives.
Probe
Manual and automated techniques probe targets to discover vulnerabilities. This list of vulnerabilities forms the foundation for the next stages of testing.
Investigate
Using the agreed scope, credentials and scenarios, we investigate the discovered vulnerabilities in detail.
Delve
We leverage exploitable vulnerabilities to determine their exploitability, impact and relevance to your business, and generate a proof of concept.
Exploitation
Using CVSS scoring together with exploitability information, we build an exploitation path map, including any custom exploits written during testing.
Reporting
A formal report detailing each stage's results, the vulnerabilities, exploitability, possible impact and severity, with pragmatic recommendations.