Black box testing: this refers to a penetration test in which the tester has zero internal knowledge of the target system. This is the most accurate approach in terms of simulating a true cyber attack. However, this approach is extremely time-consuming and therefore many areas of the target could go untested.

White box testing: in this type of test, our team will have full access to the target. The tester will be given all knowledge that is available surrounding the target, including credentials and source code.

Grey box testing: this refers to when the pen tester has some level of knowledge, access, or privileges in the target system. This approach ensures that users must have the correct level of authorisation to perform certain functions.

1.      Gathering Information

The team gathers as much data about your infrastructure and your devices as possible. This is often referred to as the “reconnaissance” stage.

2.      Enumeration

The Melius Cyber team uses various tools and manual methods to identify weaknesses. Pen testers can choose from a range of tools, but we have the benefit of access to CyberSafe, our own scanning and monitoring platform, which speeds up this part of the process.

This stage maps out the business’ digital infrastructure, making the next stage possible.

3.      Vulnerability Assessment

We use all the data that we have gathered on the system to assess the vulnerabilities that have been found.

We determine the risk of each vulnerability and decide which ones are exploitable.

4.      Exploitation

Using industry best practice techniques, the team exploit the identified vulnerabilities to understand how easily a hacker may take advantage of them and damage your business.

5.      Reporting

Gathering all the information and insight found, we collate a detailed pen test report providing insight understanding, risk scoring and remediation guidance to put the issues right.