AU
Cybercraft Digital
Offensive Security: Web Penetration Testing
Prevent common cyberattacks with Offensive Security (also known as penetration testing or a pentest) by testing your internal and external websites, platforms and APIs against our rigours testing regime. Performing annual pentesting helps to raise the security of your digital environments from an ever-changing list of threats, and helps to meet regulatory requirements that involve standards like PCI DSS, FISMA, ISO, MARS-E, HIPAA, Sarbanes-Oxley.
More about Penetration TestingFind out more
Speak with the team at Cybercraft today to find out how we can lift your organisation's information security with web penetration testing.
Get In Touch
Why choose Cybercraft
Many organisations talk about cyber risk and cyber risk management. However, not many organisations demonstrate an understanding or commitment to information security and the core principles at both governance and management levels.
For clients determining the right cyber risk partner, these can become primary differentiators between organisations delivering cyber related services. Clients need the confidence that their cyber partners walk the walk, not just talk and talk.
Rigorous Testing
Cybercraft undertakes a rigorous testing process for web application penetration testing
Automated Scanning
We use a controlled execution of automated tools to identify vulnerabilities that are presented to each user persona (Unauthenticated, Authenticated and Administrator).
Manual Exploitation
Manual exploitation of vulnerabilities will be undertaken (penetration testing) to provide evidence of the risk of a data breach or privacy breach.
Vulnerability Reporting
Cybercraft will then provide a report that outlines the testing results with categorised risks and provides a detailed summary of cybersecurity vulnerabilities and exploits for each target.
Levels of Offensive Security
Common Vulnerabilities Testing
Test your application against the internationally recognised Open Web Application Security Project (O.W.S.A.P) most common security vulnerabilities.
Application Security Verification Standard Level 1
The OWASP Application Security Verification Standard (A.S.V.S) Level 1 is the baseline penetration testing service for your web application security, and is designed to be completely penetration testable. It can be completed externally, needing minimal input from your organisation.
Application Security Verification Standard Level 2
The OWASP Application Security Verification Standard (A.S.V.S) Level 2 is penetration testing + security standards verification for applications that contain sensitive data, which requires protection and is the recommended level for most apps. This level of testing includes a review of code and infrastructure in addition the level 1 penetration testing.
Application Security Verification Standard Level 3
The OWASP Application Security Verification Standard (A.S.V.S) Level 3 is penetration testing + security standards verification for the most critical applications - applications that perform high value transactions, contain sensitive medical data, or any application that requires the highest level of trust. In addition to level 1 and 2, level 3 follows additional stricter controls.
Is your annual application security check-up overdue?
We tailor our testing plans to the size of your application. So if you've due for your annual penetration test, get in touch with us, and we'll match you to the right level of testing for your website or application. Pentration testing is in high demand, so get in touch today to prevent testing delays.
Contact us nowWhat people say about us
Get your cyber resilience needs analysed today
Book a consult
Speak with the team at Cybercraft to find out how we can analyse your cyber resilience needs.
Book Now
Other services available in Cyber Resilience
Fractional Chief Information Security Officer
This is assisting organisations with creating a risk management framework that will assist in helping the organisation create better detection on potential cyber-attacks and to become more cyber resilient.
ISO27001 Implementation
This is implementing the information security standard internationally recognised and independently audited which provides a statement of assurance that an organisation is fully committed to protecting information and have established the appropriate practices to support this.
Cyberfit Insights Assessment
This is based on lead indicators to identify cyber risks within the organisation for Executive and Directors to understand risks and prioritise further cyber risks and initiatives.
Cyber Risk Assessment
This is a comprehensive assessment providing a clear statement of cyber risk to the Board and the executive to determine risk appetite and prioritisation of remediation and funding.