penetration testing

Standard External Penetration Test One (1) deep dive PCI External Penetration Test: Testing on up to 5 active systems Unauthenticated testing of web interfaces or applications identified through service discovery in addition to 3 specific URLs Privilege escalation will be performed where possible Remediation testing is included; each medium and higher vulnerability may be retested, in a single batch process, 1 time within 90 calendar days of initial identification Testing will be conducted from service provider facilities Remediation testing will be conducted from service provider facilities Testing in a production environment A testing schedule will be coordinated between service provider project managers and client stakeholders Automated testing (scanning) will not be restricted to evening hours, at least 8 hours consecutively Manual testing will not be restricted to evening hours, at least 8 hours consecutively Findings analysis, reporting, and quality assurance reviews One report Deliverables Include: Comprehensive Vulnerability PDF Report CSV Export of Identified Vulnerabilities Attestation Letter Standard Internal Penetration Test One (1) deep dive PCI Internal Penetration Test: Testing on up to 94 active systems Segmentation testing from 2 source networks is included Privilege escalation will be performed where possible Remediation testing is included; each medium and higher vulnerability may be retested, in a single batch process, 1 time within 90 calendar days of initial identification Testing will be conducted from service provider facilities Remediation testing will be conducted from service provider facilities Testing in a production environment A testing schedule will be coordinated between service provider project managers and client stakeholders Automated testing (scanning) will not be restricted to specific times of day and may occur 24x7 Manual testing will not be restricted to specific times of day and may occur 24x7 Findings analysis, reporting, and quality assurance reviews One report Deliverables Include: Comprehensive Vulnerability PDF Report CSV Export of Identified Vulnerabilities Attestation Letter