Overview

FortiGuard Pentest team offers the following remote vulnerability assessment and penetration testing service to the companies who want to know existing security shortfalls in their network. The service conducts technical tests on an organization's assets that typically involve both automated and manual assessments.

External Vulnerability Assessment To identify vulnerabilities on a system exposed on the Internet from an outsider point of view. It includes discovering the public-facing footprint of the company requesting the test. Web Application Penetration Testing To assess the risk exposure of a web application, including but not limited to unauthorized access, privilege escalation, exploitation, and data exfiltration. We comply with OWASP Top 10 Application Security Risks when conducting vulnerability assessment on the web application. Customers may want to provide specific accounts to authenticate on the application.

Internal Vulnerability Assessment To identify vulnerabilities on a system exposed from an insider point of view. In that case, remote access has to be provided with optionally the network architecture.

Mobile Application Assessment To assess the risk exposure of a mobile application, including but not limited to unauthorized access, exploitation, and data exfiltration. We comply with OWASP Top 10 Mobile Application Security Risks when conducting tests on mobile applications.

Deliverables After the technical phases, we prepare a vulnerability assessment report presenting the potential issues found during the assessment together with risk rankings and recommended remediation procedures. Customers can act on the issues according to severity level set as High, Medium, and Low priority, which aligns with the Common Vulnerability Scoring System (CVSS) standard.