Vulnerability Assessment

ETHICAL HACKER TESTING TO IDENTIFY SECURITY GAPS.

Protect your IT assets and discover the weak points in your IT infrastructure before cybercriminals do.

Is cybersecurity important to you? Request our Vulnerability Assessment Service!

It takes 20 years to build a reputation and a few minutes of cyber-incident to ruin it.

– Stéphane Nappo, International Information Security Expert –

Cybercriminals are always one step ahead

Digitalization is becoming faster, easier and more convenient day by day. At the same time, however, our IT security services are increasingly exposed to danger in several areas due to technical development. Cybercriminals closely follow trends and constantly try to exploit weaknesses.

As a result, replacing IT equipment, introducing new software, or regularly updating existing systems does not always protect the infrastructure. In fact, it often only increases the number of security gaps, making the infrastructure more vulnerable. Ransomware and other malicious programs are then used by hackers to exploit these weak points.

That is why it is important to identify security vulnerabilities before cybercriminals do.

ITSecure’s ethical hackers step up to the challenge

Az ITSecure etikus hackerei felveszik a kesztyűt

“If you can’t beat them, join them,” as the saying goes. Vulnerability assessment, also known as ethical hacking, follows the same principle. Our experts think like cybercriminals in order to identify potential security gaps, prepare detailed reports on weak points, and, if required, help find solutions to the issues discovered.

If a client requests a complex vulnerability assessment that includes intrusion testing, also known as penetration testing, our ethical hackers do not only adopt the mindset of cybercriminals, but also apply their methods. They examine the practical exploitability of identified vulnerabilities and can go deeper into the tested system. In this case as well, the test results are documented in a detailed report, and recommendations are made to close the identified security gaps.

Don’t give cybercriminals a chance! Request our Complex vulnerability assessment service!

I want to protect my company

I’d like to learn more

If you spend more on coffee than on IT security, you will be hacked. What's more, you deserve to be hacked.

– Richard Clarke, White House cybersecurity advisor (1992–2003) –

Is ethical hacker testing safe?

An ethical hacker is not a real hacker, but a cybersecurity expert who identifies vulnerabilities in IT networks and systems. Unlike malicious attackers, ethical hackers do not cause harm; instead, they uncover weaknesses in existing defenses and point out possible solutions.

Therefore, ethical hacker testing is always:

authorized by the client

well-intentioned

a secure vulnerability assessment

Find out what an ethical hacker test reveals!

What does an ethical hacker test reveal?

Vulnerability assessment (ethical hacking) is a legal, ethical attack authorized by the client, aimed at identifying weaknesses in IT networks, systems and applications. Ethical hacking does not cause harm through malicious intent; instead, it highlights deficiencies in protection, security methods and procedures. Using decades of experience and specialized software, our cybersecurity experts identify security weaknesses in systems. At the end of the process, we prepare a detailed report and provide solution recommendations. If needed, the assessment can be repeated for verification purposes.

missing

ineffective

attackable

administered without proper operating methods or security concepts

cannot be enforced through the applied technology

What does penetration testing mean?

Penetration Test –
Intrusion Testing

A penetration test is an intrusion attempt carried out by an ethical hacker into a system, during which the cybersecurity expert not only identifies security gaps, but also uses them to penetrate as deeply as possible into the system.

Protect your company! Request our vulnerability assessment service!

I want to request the service

I’d like to learn more

The complex vulnerability assessment offered by ITSecure not only identifies security gaps, but our experts also provide tailored recommendations for handling the problems and, if required, can also solve them.

Discover our services!

Complex Vulnerability Assessment

Vulnerability assessment is a series of ethical hacker tests performed on a product that is already live or still under development, and covers the following areas:

configuration deficiencies

development errors

vendor vulnerabilities

identification of known vulnerabilities

At the end of the tests, after the identified vulnerabilities have been assessed, we prepare an information package for our clients and make recommendations for remediation. Technical vulnerability assessment is not part of the service itself; it can be requested from our experts based on the results of the preliminary vulnerability assessment.

Penetration Testing

During the previously described penetration test or intrusion test, the ethical hacker examines the practical exploitability of the identified vulnerabilities. Naturally, running such a test also requires authorization from the client.
During a penetration test, experts simulate an attack carried out by cybercriminals, but not against the entire network or company. Instead, they focus on the specific target area or application. The goal of the assessment is to determine how deeply they can get into the system and whether they can gain the highest possible level of privileges in order to access sensitive data.
It is important that our experts conduct penetration testing in a controlled environment, in a pre-defined time frame approved by the client and with continuous reporting. The purpose is to determine the level of risk that the given attack point represents for the client’s system.

Comparison of Vulnerability Assessment and Penetration Testing

Vizsgálat	Sérülékenységvizsgálat	Penetrációs teszt
Célja	A sérülékenységek, főbb támadási pontok azonosítása	A sérülékenységek azonosítása és azok kihasználásán keresztül hozzáférés szerzés
Elkészülési idő	Rövidebb	Hosszabb
Mélysége	Áttekintő	Részletekbe menő
Ár	Egyedi árszabás	Egyedi árszabás

Assessment	Vulnerability Assessment	Penetration Testing
Goal	Identification of vulnerabilities and major attack points	Identification of vulnerabilities and gaining access through their exploitation
Preparation time	Shorter	Longer
Depth	Overview-level	More detailed
Price	Custom pricing	Custom pricing

Request the preliminary assessment

I’d like to learn more

Discover our methods!

Black Box

The assessment is performed without prior knowledge of the infrastructure.

Gray Box

Gray box testing is carried out based on partial knowledge of the IT infrastructure.

White Box

White box testing is performed with full knowledge of the IT infrastructure, meaning that before the ethical hacker test is carried out, cybersecurity experts are familiar with network diagrams, source code, and the detailed parameters of the system.

White box, gray box and black box testing are all part of both vulnerability assessment and penetration testing.

I need the service

I’d like to learn more

Discover the directions and areas of the assessment!

Ethical hacker tests can be grouped not only by methods, but also by the direction of the assessment and the examined areas.

The direction of vulnerability assessment is determined by where we assume the attack originates from. According to this classification, we distinguish between external and internal assessments.

External Vulnerability Assessment
During an external vulnerability assessment, our experts simulate an attack launched from outside the organization, focusing on the analysis of internet-accessible websites and web applications.

Internal Vulnerability Assessment In the case of an internal vulnerability assessment, our experts establish a connection from within the organization and examine the vulnerabilities of IT services and systems available on the internal network.

If needed, we carry out both external and internal ethical hacker testing during both vulnerability assessment and penetration testing.

The vulnerability assessment may cover any area of the IT infrastructure. ITSecure experts provide assistance in the following areas:

Servers and workstations (operating system, database, directory service) vulnerability assessment

Assessment of applications (web applications, websites, CRM and enterprise management systems)

Testing of infrastructure (network devices, internet connection, Wi-Fi network, VPNs)

Vulnerability assessment and penetration testing both include diagnostics of all affected areas.

Request vulnerability assessment

I’d like to learn more

Discover the phases of our services!

Our experts perform vulnerability assessment and penetration testing in several phases, in accordance with Hungarian and international standards as well as methodological guidelines. These phases are as follows:

Planning and preparation

Our cybersecurity experts define the scope of the ethical hacker test in consultation with the client. After that, they determine the methodology and set a deadline for carrying out the vulnerability assessment and preparing the summary report.

Execution

In this phase, our ethical hackers identify vulnerabilities hidden in the system using automated tools and manual testing, and then categorize the identified threats.

Passive test

Our experts use non-intrusive, open-source tests to identify public vulnerabilities, then categorize these threats.

Active test

This is followed by the ethical hacker attack: during the in-depth offensive assessment, they explore and document any newly emerging vulnerabilities.

Evaluation

Once the vulnerability assessment has been completed, our experts evaluate the system’s weak points and prepare the next cycle. After that, they compile the information obtained during the test and formulate proposals and recommendations for the client.

I am interested in the service

Vulnerability Assessment for websites and web applications

An ethical hacker assessment of a website or web application can always be carried out by simulating an external attack. A website vulnerability assessment reveals those weak points that attackers can exploit manually or through automated techniques to take control of the servers.

Sérülékenység-vizsgálat weboldalak és webes alkalmazások esetén

Tools

To perform the vulnerability assessment, we use our own tools and software:

If you would like to protect your website or web application, request our vulnerability assessment service!

This is exactly what I need

I’m also interested in vulnerability assessment for mobile applications

Sérülékenység-vizsgálat mobilapplikációk esetén

Vulnerability Assessment for mobile applications

During a vulnerability assessment of mobile applications, we perform an ethical hacker test on a specific custom mobile application (iOS and/or Android). The purpose of the assessment is to identify and understand all vulnerabilities of the application, ranging from binary compilation issues to the improper storage of sensitive data.

Phase 1:

Preparation of the Vulnerability Assessment

Planning

We plan the process of carrying out the vulnerability assessment.

Recording the initial state

Following the planning phase, we record the initial state prior to the vulnerability assessment, which our cybersecurity experts restore at the end of the process.

Information gathering

We collect all information from the client related to project planning and the defined objectives.

Review of the rules of engagement

The rules of engagement are reviewed: during a brief consultation with the client, we confirm the project scope and the schedule of the vulnerability assessment. We define the specific testing objectives and answer any project-related questions.

Phase 2:

Execution of the Vulnerability Assessment

Reconnaissance

The first step in carrying out the vulnerability assessment is reconnaissance, during which we collect all relevant information from publicly available sources.

Threat modeling

The next step of the ethical hacker test is threat modeling, during which we assess the threat types that may affect the target assets covered by the assessment.

Mobile Application Security Testing

The final step of the assessment phase is carrying out the mobile vulnerability assessment: at this stage, our experts map all affected targets and the application at both network and application level.

Phase 3:

Follow-up activities

Quality assurance

Each step of the evaluation goes through a strict technical and editorial quality assurance process. This may also include a follow-up consultation with the client.

Minőségbiztosítás

Az értékelés minden lépése szigorú technikai és szerkesztői minőségbiztosítási folyamaton megy keresztül. Ennek részét képezheti az ügyféllel való utólagos egyeztetés.

Presentation of the results

The process concludes with presenting the full documentation prepared at the end of the vulnerability assessment to the client. At this point, we explain the provided information, make any necessary updates, and answer questions related to the evaluation.