Network Security Testing
Full-Service Network Security Testing
This is more than a simple vulnerability assessment. We actively attempt to circumvent security controls by carrying out exploits that take advantage of discovered vulnerabilities, revealing what an adversary would be able to do. During testing, we look for any method that can violate the CIA Triad security model (confidentiality, integrity, availability).
- Confidentiality is limiting information to only the authorized person(s) who should have access to it.
- Integrity is ensuring data/communication at rest or in transit can only originate from, be sent to, or be modified by an authorized person(s).
- Availability is the ability for an authorized person(s) to access the resources when needed.
The purpose of testing is to enumerate your exposure (within the given time constraints), identify and verify as many vulnerabilities as possible, ensure your security configurations are strong, and then provide actionable solutions to help you protect your organization from attack/compromise. Types of common vulnerabilities found during this testing include those that allow an attacker to gain remote access into your environment, escalate privileges, gain access to your most sensitive data, and exfiltrate it from your network. In most cases, we will leverage the discovered vulnerabilities to (1) verify it is exploitable and (2) determine your exposure, should it be breached.
The testing is largely centered around the PTES, NIST SP 800-115, and OSSTMM testing guides, but also includes our internal/proprietary methodologies. This is “noisy” and may generate alerts in the monitoring solutions you have deployed.
View our Sample Findings and Recommendations Report to see the level of detail PEN Consultants provides in our report.
Sample Pricing
External
- Minimum: Less than 5 active IPs – $9,000 - $12,000
- Micro: 10 active IPs – $11,000 - $15,000
- Small: 20 active IPs – $12,000 - $18,000
- Medium: 40 active IPs – $13,000 - $21,000
- Large: 75 active IPs – $14,000 - $25,000
- xLarge: More than 75 active IPs – Varies
Internal
- Minimum: Less than 50 active IPs (<5 servers) – $12,000 - $15,000
- Micro: 250 active IPs (25 servers) – $14,250 - $18,750
- Small: 750 active IPs (65 servers) – $15,500 - $22,500
- Medium: 2,000 active IPs (150 servers) – $18,000 - $30,000
- Large: 7,500 active IPs (375 servers) – $25,000 - $50,000
- xLarge: More than 7,500 active IPs (>375 servers) – Varies
Add-On Services
In order to keep our testing prices low, we’ve removed certain services that not every client requests. Under our Cybersecurity Unlimited Retainer (included with all of our contracts) you can add on the following services as needed. Please reference the Cybersecurity Unlimited Retainer page for pricing details.