Find your weak spots

Penetration testing & security assessments

The only way to know how you'd hold up against an attacker is to have someone try. Qualified testers do exactly that, then tell you plainly what to fix.

Ask us about this
The risk

Scanners report weaknesses in theory. A skilled attacker chains them together, and it's only when someone actually tries that you find out which ones lead somewhere.

Customers, insurers and tenders increasingly ask for evidence of recent testing, and a vulnerability scan often isn't enough.

What it does
  • External penetration testing of your internet-facing systems
  • Internal testing: what an attacker, or an insider, could do once inside your network
  • Wireless testing, including spotting unauthorised access points
  • Web application security assessments
  • Goals agreed with you up front, so testing focuses on what matters to your business
  • A full report of what was tested, what was found and what to do next
  • Critical and high-severity findings retested once you have fixed them (within 90 days)
Who it's for

Businesses asked for a penetration test by customers, insurers or tenders, those working towards ISO 27001, and any business that has made a significant change, such as a new system, a new office or a new website.

How we supply it

Testing is carried out by Sophos Advisory Services and arranged through us. We'll help you agree the scope, and we can help fix what's found at our standard day rate.

What's under the hood

Sophos Security Testing & Assessment — delivered by Sophos Advisory Services testers, whose findings also feed into Sophos Fusion.

Questions
A common rule of thumb is at least once a year, and after any significant change such as a new system, an office move or a new website.
Tests are planned with you, including timing and any systems to avoid, so they don't get in the way of normal work.
Tell us which accreditation is required when we scope the test, and we'll confirm the testers' credentials before you commit.

← Back to Find your weak spots

Not sure what you need?

Tell us a little about your business and we'll recommend the controls that matter most for it — no obligation, and no jargon.

Talk to us → or see every security area →