Cybersecurity
Compliance
Managed Services
About Us
Our Partners
Careers + Culture
Scholarship
Articles
Downloads
Remote Help
Book an AppointmentSecurity Controls Testing
Testing cybersecurity controls (often called “penetration testing” or "pentesting") is a white-hat (ethical hacker) activity that enables a company to identify vulnerabilities its network, systems, or software.
OVERVIEW
Who should test?
Testing is an essential part of the security verification process. These services are for organizations building a mature cybersecurity practice that have already assessed and mitigated risk. The testing process validates a company’s security posture and uncover areas for improvement; it is not a first step. But, it’s an important one as your company grows.
Steel Root’s Security Control Testing Capabilities
Network penetration testing
Mobile/web application assessment and testing
Social engineering (phishing, baiting, pretexting) simulation
OSINT (open source intelligence) and passive reconnaissance reporting
Security Controls Assessment and Validation (SCA-V)
What is a "Pen Test"?
A pentest (penetration test) is a common cybersecurity exercise in which an ethical hacker looks for vulnerabilities in your company’s security posture. In many cases, a pen test is part of compliance with PCI, HIPAA, and other regulatory frameworks. In addition to probing general network and server vulnerabilities, we can access specific IT targets, flags, such as firewalls, wireless networks, and web applications, or areas and assets containing sensitive data.
Read MoreExplore More: Cybersecurity Consulting
We deliver consulting engagements that help business leaders navigate cybersecurity and compliance by bringing subject matter expertise and critical analysis to guide business decisions.