Laneden - A Cyber-Security Company | Penetration Testing Services | Social Engineering Security Services | Ethical Hacking Services

A vulnerability assessment is an automated scan that systematically inspects all hosts and services. This assessment looks to identify known vulnerabilities across its given scan range. A skilled engineer confirms the findings and collates the results in a concise report.

A penetration test is rather different; the skilled engineer leading the engagement needs to have a breadth of knowledge and experience in information technology and its systems. They require the ability to think abstractly, to solve problems effectively and, to anticipate the behaviour of a threat actor.

Constantly looking for a way to manipulate bad security practices and business processes. They actively look to exploit systems and processes in an attempt to exfiltrate data or compromise your business systems.

They then require the abilities to concisely convey their exploitation of your systems and processes simply and effectively. Not only explaining their process for exploitation but also the means to remediate the risks they have identified. Allowing the client to fill their security gaps quickly before any malicious exploitation can be carried out.

A vulnerability management program is a framework for managing an organisations risk associated with their threat landscape and security posture. This is achieved through processes and procedures that allow the effective identification, classification, confirmation and, remediation of security concerns.

Identification
The way the organisation is going to identify and track known vulnerabilities and changes to their threat landscape.

Classification
Understanding and classify findings with a risk-based score, explaining the true risk to the organisation allows effective prioritisation and triage of any findings.

Confirmation
Testing and confirming mitigation of any remedial tasks allows the business to understand any associated risks with the identified corrective actions. Will the recommended remediation effect any BAU (business as usual) processes, causing downtime? Does the recommended remediation resolve the identified risk or, will you be applying hundreds of changes across your network for no reason wasting money and most importantly time?

Remediation
Once confirmation is achieved, accurate remediation can be carried out with little risk to the organisation.

Vulnerability assessment costs are based on the number of systems in scope. Generally speaking, a vulnerability assessment and reporting of the findings takes 2 to 3-man days to complete.

Please feel free to contact the Laneden team and have a no-obligation impartial discussion to get a better idea on the costs based on your specific requirements.