Conducting a penetration test typically follows a structured process to ensure clarity, effectiveness, and alignment with business objectives. Here are the key steps involved, starting from the initial discovery meeting:

Step 1: Discovery Meeting

In a first conversation we listen to your pentesting goals and type of pentesting needed. We choose the methodology (black-box, grey, etc.) and discuss timeline and approach.

Step 2: Proposal & Requirements

We present a formal proposal detailing the scope of work including security testing objectives, methodology and deliverables. This also states which requirements are necessary (e.g. IP addresses, whitelisting, etc.)

Step 3: Pre-Engagement Preparation

We gather and collect required information (e.g. IP ranges, domains, test accounts, etc) and configure testing environments. Together, we coordinate a testing window and set communication channels.

Step 4: Penetration Testing Execution

We conduct testing to identify vulnerabilities, and document findings in real-time with evidence (screenshots, logs, exploit proof-of-concepts). Communication channels with your team remain open in case of critical findings or technical questions.

Step 5: Reporting & Recommendations

We deliver a detailed report including technical findings (severity, impact, risk) and remediation guidance. If desired, a walkthrough session of the report is possible.

Step 5: Remediation and Retesting

After delivering the report, we offer clear guidance and support to help remediate the identified issues, prioritizing fixes based on business risk and overall impact. There is an opportunity for us to conduct retesting post remediation.