Question 1

Can a penetration test be combined with a Managed SOC?

Accepted Answer

Yes. Penetration testing provides insight into vulnerabilities while a Managed SOC focuses on monitoring, detection and follow-up of threats.

Combining both gives a more complete picture of your organisation's cyber resilience.

Question 2

What is the difference between an external and internal penetration test?

Accepted Answer

An external penetration test focuses on systems that are reachable from the internet.

An internal penetration test assesses risks within the internal network, for example when an attacker or employee has already gained access to the environment.

Question 3

What does a penetration test cost?

Accepted Answer

The costs depend on the size of the environment, the number of systems, the desired depth and the type of test.

During a no-obligation conversation we discuss the objectives, scope and required work so a suitable quote can be drawn up.

Question 4

What happens after a penetration test?

Accepted Answer

Afterwards your organisation receives a report with findings, risks, priorities and recommendations.

Where desired, we can help translate findings into concrete improvement measures.

Question 5

Can Microsoft 365 environments also be tested?

Accepted Answer

Yes. Depending on the objective, parts of Microsoft 365, identity management, authentication processes and related cloud environments can be assessed.

Question 6

Are systems disrupted during a penetration test?

Accepted Answer

A penetration test is carried out in a controlled manner to limit risks to business operations as much as possible.

Agreements on scope, methodology, time windows and any restrictions are made in advance.

Question 7

Does a penetration test support NIS2 and compliance processes?

Accepted Answer

Yes. Penetration testing can support organisations with NIS2, ISO 27001 and other information security and compliance processes.

The results provide insight into vulnerabilities, risks and improvement measures.

Question 8

How often should a penetration test be carried out?

Accepted Answer

This depends on changes within your IT environment, compliance requirements and risk profile.

Many organisations carry out a penetration test annually or after major changes to systems, applications or cloud environments.

Question 9

What is the difference between a vulnerability scan and a penetration test?

Accepted Answer

A vulnerability scan automatically searches for known vulnerabilities.

A penetration test goes further and assesses whether vulnerabilities can actually be exploited and what impact this has on your organisation.

Question 10

What is a penetration test?

Accepted Answer

A penetration test is a controlled security test in which systems, networks, applications or cloud environments are examined from an attacker's perspective.

The aim is to identify vulnerabilities before malicious parties can exploit them.

Question 11

Does this cover our penetration testing requirement?

Accepted Answer

Yes, this service offers unlimited penetration testing with which you can test your entire infrastructure and applications. This allows you to identify weaknesses in your security before a cybercriminal does, and it helps to pass audits.

Question 12

Who carries out the tests?

Accepted Answer

Our talented offensive testing team delivers this service with a combination of automated software and manual analysis.

Penetration testing: discover vulnerabilities before attackers do

You will be speaking with Ralph Dykstra

Penetration testing: discover vulnerabilities before attackers do

More about cyber resilience

You will be speaking with Ralph Dykstra