Vulnerability Assessment

PENETRATION TESTING

We not only assess the report, if need required we can simulate and exploit as a proof-of-concept (POC) approach that can assess the real world damage if the vulnerabilities are not fixed. We have seasoned professional who are versatile when performing search and ensure precautions have to be taken before deployment.

FLOWCHART

TYPES OF PENETRATION TESTING

TOOLS

Tools which we use when performing the tests and we not only limit our capabilities to automated approach, we are well versed with manual approach too.

Nmap
Acunetix
Nessus
OpenVAS
Nexpose

BurpSuite
Metasploit
Sublister
Dirbuster
Knoxss

Wireshark
Zap proxy
Maltego
Blind Elephant
Kali Linux etc

Threat Modeling

METHODOLOGIES

• STRIDE Methodology

• Process for Attack Simulation and Threat Analysis (PASTA)

FLOWCHART

TOOLS

Microsoft Threat Modeling Tool 2016
SECURICAD
IriusRisk - Threat Modeling Tool
ENTERPRISE THREAT MODELING

SAST

Static Application Security Testing

FLOWCHART

TOOLS

SAST tools help the security experts to evaluate the potential security flaws in the application. It is basically a white box testing tool which detects the vulnerabilities by actually analyzing the code snippets.

• HP Fortify

• IBM AppScan

• CheckMarx

DAST

Dynamic Application Security Testing

TOOLS

DAST tools helps the security experts to evaluate the potential security flaws in the web application.It is basically a dynamic black box testing tool which detects the vulnerabilities by actually performing the attack. It helps us to recognize vulnerabilities present in the web application by taking necessary input from the users.

• HPE WebInspect

• IBM Appscan

• Acunetix

• Burpsuite Professional

WORKFLOW