Penetration Testing

Security Testing, Audit & Compliance

With the largest penetration testing team in Europe NGS Secure can provide a comprehensive range of services, using our experienced UK Government-accredited CLAS and CHECK penetration testing specialists.

Infrastructure Penetration Testing

Using onsite or remote support, our Infrastructure Penetration Testing service gives you a detailed and comprehensive status report on your current threat levels and exposure concerns.

Using our unique penetration testing methodologies, each host will be rigorously tested to ascertain the ability of the environment to withstand multiple attack vectors. Security vulnerabilities and deviation from best practice that may compromise the integrity and confidentiality of your digital information assets will be exposed through this process.

Our penetration testing specialists will then provide appropriate remedial advice to protect against current threats as well as minimising exposure to future vulnerabilities.

Application Security Testing

Time constraints and perceived higher priorities often result in the application of lax security practices and then less than robust data protection. As many organisations are now discovering, security flaws within their custom applications represent a real threat to the development of their business.

Our Application Security Testing focuses on custom-built applications or system components developed internally by our clients, or by third–party agencies. Our testing specialists analyse and test for vulnerabilities specific to the custom application and the data systems they interact with. Problems are identified and addressed, leaving your organisation better equipped to do business with confidence.

Social Engineering

Our intention is to bypass whatever controls are in place, by manipulating staff or information systems; to gain confidential information and evaluate your vulnerability to physical and social engineering attacks. The process may involve us trying to gain access to your building, to see how easy it may be for unauthorised entry and whether we can move around the building to access the networks and restricted data. We then attempt to gain further access by assessing additional security problems, by directly contacting staff. Potential deficiencies in operating procedures, employee awareness and corporate policy relating to the handling and disposing of classified information and waste paper are identified as a result.

Remote Access Security Testing

Our Remote Access Security Testing ensures that you are equipped to manage the security risks that arise from flexible working. We evaluate the security of all the components making up your flexible working environment using our unique penetration testing methodologies and assess the security of the architecture, the configurations and implementations. We are then able to provide you with a report on the potential risks and exposures relating to these communication channels to prevent attackers gaining access to sensitive or confidential information such as customer data.

Wireless Security Testing

These days’ everyone is embracing wireless technologies to increase productivity. Wireless technology is used to expand IT infrastructures and to include areas not traditionally accessible from wired environments. Despite its benefits, it is an area that contains much insecurity - making it a very popular choice for attackers. Whilst mainstream scrutiny has concentrated on the security problems associated within 802.11 based network architectures, there are many other areas of wireless capability that are just as susceptible.

We provide a full range of Wireless Security Testing for Bluetooth Network Testing, Wireless Input Device Testing, Wireless Handheld Security Testing, Wireless Transaction Device Testing and Cordless Communications Testing; Electromagnetic Radiation (EMR) Testing, RFID Security Testing and Microwave Radio Testing; Wireless Surveillance Device Testing and Infrared Systems Testing and 802.11 Network Testing.

Mobile Security Testing

More and more organisations are using mobile technology to communicate with their customers, employees and business partners. Mobiles connect in real-time and can provide services anytime and anywhere. They provide access to email, contacts and potentially confidential information, and like any application, they represent a threat if they are lost or compromised. Our Mobile Security Testing helps you evaluate the risks from deploying a mobile solution to ensure that adequate steps are taken to avoid a compromise. We have undertaken iPhone and Blackberry Enterprise Server reviews, and have an in-depth understanding of 2.5G (GSM)/3G(UMTS) networks.

IT Health Check (CHECK)

Whether you require an IT Health Check (CHECK test) because you are part of the UK Government or Critical National Infrastructure, or a private sector organisation that demands a high-level of assurance, we can help. We have been providing CHECK tests since 2001. We can perform your test under CESG’s CHECK terms and conditions, and are available to work on UK Government protectively marked systems up to CONFIDENTIAL. We can also provide SC and DV cleared CHECK team leaders and members.

CTAS

We are one of only three organisations to be accredited by CESG to provide specialist information assurance services, known as the CESG Tailored Assurance Service (CTAS). The service provides an independent, technical security evaluation of a product or system for a government or possibly critical national infrastructure organisation.

Bespoke Security Testing

If a service is not listed here, it doesn’t necessarily mean we don’t do it. Please contact us to discuss your unique penetration testing requirements. We have developed, in conjunction with our clients, a wide range of testing methodologies that have been specifically tailored to their very individual requirements.