Contact Us

Contact Us

Please get in touch using the form below

I prefer to be contacted by:
View our privacy policy
Book a CREST penetration test today. Get a quote.

Overview

Uncovering weaknesses before the bad guys do

Modern cybercriminals are persistent, determined and well-resourced. In an attempt to compromise networks, systems and applications they use a wide range of tactics and techniques. Ethical hacking is a key way to understand how good organisations are at preventing, detecting and responding to the latest attack methods.

Definition

What is ethical hacking?

Ethical hacking is the identification and exploitation of security vulnerabilities for the purpose of improving an organisation’s cyber security. Ethical hacking helps organisations improve their security status by uncovering exposures that are beneath the surface and providing support to address them.

An ethical hacker, also commonly referred to as a white hat hacker, is a cyber security professional entrusted to perform ethical hacking assessments. Certified ethical hackers possess a comprehensive understanding of the tactics and techniques that malicious ‘black hat’ attackers use and leverage this knowledge to ensure that ethical hacking assessments accurately reflect real-life adversarial approaches.

Types

Types of ethical hacking assessments

The term ethical hacking is used to describe a broad range of assessment types. From penetration tests performed over a matter of days, to red team operations conducted over weeks and months, ethical hacking engagements vary significantly in scope, duration and price.

Types of penetration test

Network infrastructure testing

Network infrastructure testing

Redscan rigorously investigates your network to identify and exploit a wide range of security vulnerabilities. This enables us to establish if assets such as data can be compromised, classify the risks posed to your overall cyber security, prioritise vulnerabilities to be addressed, and recommend actions to mitigate risks identified.

Wireless testing

Wireless testing

Unsecured wireless networks can enable attackers to enter your network and steal valuable data. Wireless penetration testing identifies vulnerabilities, quantifies the damage these could cause and determines how they should be remediated.

Application and API security review

Application and API security review

Vulnerabilities contained within software are commonly exploited by cybercriminals and are easily introduced by under-pressure programmers. Redscan’s ethical hackers conduct automated and manual penetration tests to assess backend application logic and software and API source code.

Remote working assessment

Remote working assessment

If your organisation is embracing mass remote working for the first time, it’s important to ensure that it is doing so securely. Ensure your networks, applications and devices are protected and fully secured with a custom remote working security assessment.

Web application security testing

Web application security testing

Web applications play a vital role in business success and are an attractive target for cybercriminals. Redscan’s ethical hacking services include website and web app penetration testing to identify vulnerabilities including SQL injection and cross-site scripting problems plus flaws in application logic and session management flows.

Social engineering

Social engineering

People continue to be one of the weakest links in an organisation’s cyber security. Redscan’s social engineering pen test service includes a range of email phishing engagements designed to assess the ability of your systems and personnel to detect and respond to a simulated attack exercise.

Mobile security testing

Mobile security testing

Mobile app usage is on the rise, with more and more companies enabling customers to conveniently access their services via tablets and smartphones. Redscan carries out in-depth mobile application assessments based on the latest development frameworks and security testing tools.

Firewall configuration review

Firewall configuration review

Firewall rule sets can quickly become outdated. Redscan’s penetration testers can detect unsafe configurations and recommend changes to optimise security and throughput.

Looking for ethical hacking services?

Get in touch

Timing

When to conduct ethical hacking

With threats constantly evolving, ethical hacking assessments should be performed regularly. Penetration testing, for example, should be conducted at least annually, as well as after any significant infrastructure changes and before new product or service launches. Testing can also be timed to coincide with audit checks required for compliance with:

Accreditation

The importance of accredited ethical hackers

Redscan is a member of CREST, an international certification body for information security. By choosing our CREST-accredited ethical hacking services, you can be confident that all our assessments are conducted in accordance with the strictest legal, technical and ethical standards. Our CREST-certified ethical hackers hold a range of certifications and are qualified to perform many different types of security testing.

Expertise

Our security qualifications

Why choose Redscan?

A trusted partner for pen testing

  • One of the highest accredited UK pentesting companies
  • A deep understanding of how hackers operate
  • In-depth threat analysis and advice you can trust
  • Complete post-test care for effective risk remediation
  • Multi award-winning offensive security services
  • Avg. >9/10 customer satisfaction, 95% retention rate

            

Get in touch

Complete the form for a prompt response from our team.

I prefer to be contacted by:
View our privacy policy

Resources

Discover our latest content and resources

From the blog
From the blog Case studies Latest news
15th September 2020
Significant number of remote workers use own devices to access company data
A global survey of over 13,000 remote workers has found that 39% of them use their own devices to access data belonging to their employer, often via services and applications hosted in the cloud. Many of the personal devices used to do this were identified as being less secure than corporate devices.
8th September 2020
New research suggests a quarter of company desktops lack security software
New research suggests that almost one in four (23%) of desktop computers and one in five (17%) of laptops supplied by UK employers lack security software. The research also reveals company smartphones to be as exposed to cyber security issues as desktop computers.
1st September 2020
Formal warnings issued about the rise in vishing attacks
The FBI have issued formal warnings about vishing, a new version of phishing in which cybercriminals make voice-over-IP (VoIP) calls to employees they view as vulnerable. The rise of vishing, also known as voice phishing, is thought to be due to the increase in remote working and the use of VPNs.
25th August 2020
96% of UK businesses experienced at least one major cyber-attack over the past year
Research shows that 96% of UK businesses experienced at least one significant cyber-attack over the past year with 65% of respondents stating that their operational technology (OT) had undergone an attack.