Services
Penetration Testing and Security Assessment
We scope each test around the systems and threats that matter to you and write findings your engineers can act on the same week. The consultant who tests your environment is the one who walks you through the report.
What the Work Covers
- External and internal infrastructure testing
- Active Directory and Microsoft Entra ID assessment, including the attack paths to domain admin
- Cloud configuration review and testing in Microsoft Azure and AWS
- Web application and API testing to the OWASP methodology
- Firewall rule and segmentation testing, to prove the network does what the diagram says
- White label testing for managed service providers and partners, delivered and reported under your brand
What You Receive
- An executive summary and a technical report, with every finding rated, reproduced and paired with a fix
- A debrief with the tester
- A retest of the fixed findings, agreed in the scope
Who It Is For
Organisations preparing for an audit, a customer's security questionnaire or a major change, and those who want an independent view of their exposure.
Who Tests
Each engagement is staffed with testers who hold the certifications it calls for, such as OSCP or CREST registered testers, and the scope names who will do the work before you sign.
How It Starts
Tell us what you want tested, why now and any dates that matter. We will send a scope, a method statement and a quote.
Every engagement is scoped and contracted before work starts: what is in scope, what it costs, who does the work and when you will have the results.
Write to solutions@greywellcyber.com, or see the contact page.