Penetration Testing
in Saudi Arabia (KSA)

Penetration Testing

Penetration testing can be used to evaluate a wide range of security controls, including network and network device configurations, application security, and endpoint security. Penetration testing, also known as “pen testing” or “ethical hacking,” is the practice of testing the security of a computer system, network, or web application by simulating an attack from a malicious actor.

1

Black box testing.

2

White box testing.

3

Gray box testing.

4

Infrastructure Penetration Testing.

5

Applicative Penetration Testing.

6

Cloud Penetration Testing.

Black Box Testing

In which the tester has no knowledge of the system or network being tested. Generally, it may take around 8~9 weeks for completion of this activity.

White Box Testing

Tester has complete knowledge of the system or network being tested. It may take around 3~4 weeks approximately to carry out this activity.

Gray Box Testing

Combination of black and white box testing and has partial knowledge of internal infrastructure and approximately takes 6 weeks for completion.

Infrastructure Penetration Testing

Here Tester applies modern invasion techniques and lateral movement tend to control organization’s computerized system. It combines several MITRE based attack vectors.

Applicative Penetration Testing

Includes web, Internal/external portals, & servers to be tested and reported. Testing will help developers and teams to cater to the security flaws.

Cloud Penetration Testing

Many organizations have cloud based, even multiple cloud based services for which cloud penetration testing extensively helps to determine hardening level.