Black box testing: this refers to a penetration test in which the tester has zero internal knowledge of the target system. This is the most accurate approach in terms of simulating a true cyber attack. However, this approach is extremely time-consuming and therefore many areas of the target could go untested.

White box testing: in this type of test, our team will have full access to the target. The tester will be given all knowledge that is available surrounding the target, including credentials and source code.

Grey box testing: this refers to when the pen tester has some level of knowledge, access, or privileges in the target system. This approach ensures that users must have the correct level of authorisation to perform certain functions.

1.      Information Gathering

This is when the team gathers as much data about your web app as possible.

2.      Enumeration

The Melius Cyber team uses various tools to identify weaknesses. Pen testers can choose from a range of tools, but we have the benefit of access to CyberSafe, our own scanning and monitoring platform, which speeds up this part of the process.

3.      Vulnerability assessment

The tester uses all the data that they have gathered on the system to assess the vulnerabilities that they have found.

They determine the risk of each vulnerability and which ones are exploitable.

4.      Exploitation

Using industry best practice techniques, the team test found vulnerabilities to understand how easily a hacker may take advantage of them and damage your application.

5.      Reporting

Gathering all the information and insight found, we collate a detailed pen test report providing insight understanding, risk scoring and remediation guidance to put the issues right.