IT Security Consulting Services:

Security Assessment:

Our Penetration Testing offering focuses on checking a client's network for vulnerabilities and exposure through the internet and internal network through a comprehensive analysis for unauthorized access. We conduct an extensive analysis of your servers, workstations and the network as a whole from the various entry points from the public network as well as the internal network.

Reports:

Written reports provided to the customer following the evaluations are as follows:

• An executive report that features a summary of the findings to upper management
• A detailed technical report on vulnerabilities discovered with a severity grid, explaining security concerns and the recommended fixes

Internal Penetration Testing

The objective of this test is to see if it possible for someone connected to the internal network to gain access to areas of your network that he is not privileged to

This could come from an internal user who has low privileges or trusted external user who abuses his trusted status in order to gain access to private areas of your network. Our consultants will conduct a security analysis of the workstations and servers of the customer's network. The objective of the analysis is to test the security of these devices internally (internal pen test) by connecting directly to the customer's network. The analysis will determine what kind of traffic is allowed through the network and if any vulnerability exists within the devices. The penetration test will also cover the management consoles to determine if there is any vulnerability within them.

External Penetration Testing:

The objective of this test is to see if it is possible for anyone from the internet to gain access to your network.

eHosting Data Fort consultants will conduct a security analysis of the public servers and network assets of the customer's network. The objective of the analysis is to test the security of these devices from the internet (external pen test) using public IPs. The analysis will determine what kind of traffic is allowed through the network and if any vulnerability exists within the devices. A flowchart of our methodology is shown below followed by a description of each step.