Overview
What is a build and configuration security review?
An insecurely configured network could give attackers an easy route into your organisation. Commissioning a qualified ethical hacker to conduct a build or configuration review helps to reduce this risk by identifying security misconfiguration vulnerabilities across web and application servers, web frameworks, and devices such as routers and firewalls.
Redscan’s CREST-accredited penetration testing team has extensive experience of providing build and configuration review services to help identify and address weaknesses.
Importance
The importance of regularly assessing system configurations
The fast pace of business growth and digital transformation means that it’s important to ensure your organisation’s cyber security keeps up. New systems, applications and devices can introduce security risks that could lead to an attacker gaining a foothold on your network and accessing critical data and assets. Many devices have weak out-of-the-box settings.
Review
What we review
Process
Our review process
A build and configuration review pen test systematically assesses devices, operating systems and databases across your networks. A typical engagement from our ethical hacking experts involves:
Request a build and configuration review quote
Get in touch
Services
About our penetration testing services
Redscan’s CREST-accredited penetration testing services are designed to identify and safely exploit security vulnerabilities in infrastructure, systems and applications. As with our Build and Configuration Review services, all our assessments are designed to pinpoint hidden security risks and provide the support and guidance needed to address them.
Expertise
Our security qualifications
Types of penetration test
Network infrastructure testing
Redscan rigorously investigates your network to identify and exploit a wide range of security vulnerabilities. This enables us to establish if assets such as data can be compromised, classify the risks posed to your overall cyber security, prioritise vulnerabilities to be addressed, and recommend actions to mitigate risks identified.
Wireless testing
Unsecured wireless networks can enable attackers to enter your network and steal valuable data. Wireless penetration testing identifies vulnerabilities, quantifies the damage these could cause and determines how they should be remediated.
Application and API security review
Vulnerabilities contained within software are commonly exploited by cybercriminals and are easily introduced by under-pressure programmers. Redscan’s ethical hackers conduct automated and manual penetration tests to assess backend application logic and software and API source code.
Remote working assessment
If your organisation is embracing mass remote working for the first time, it’s important to ensure that it is doing so securely. Ensure your networks, applications and devices are protected and fully secured with a custom remote working security assessment.
Web application security testing
Web applications play a vital role in business success and are an attractive target for cybercriminals. Redscan’s ethical hacking services include website and web app penetration testing to identify vulnerabilities including SQL injection and cross-site scripting problems plus flaws in application logic and session management flows.
Social engineering
People continue to be one of the weakest links in an organisation’s cyber security. Redscan’s social engineering pen test service includes a range of email phishing engagements designed to assess the ability of your systems and personnel to detect and respond to a simulated attack exercise.
Mobile security testing
Mobile app usage is on the rise, with more and more companies enabling customers to conveniently access their services via tablets and smartphones. Redscan carries out in-depth mobile application assessments based on the latest development frameworks and security testing tools.
Firewall configuration review
Firewall rule sets can quickly become outdated. Redscan’s penetration testers can detect unsafe configurations and recommend changes to optimise security and throughput.
Meet some of our team
Get a Pen Test quote now
Keep your business safe by protecting your networks, systems and apps with our penetration testing services.
- One of the highest accredited UK pentesting companies
- A deep understanding of how hackers operate
- In-depth threat analysis and advice you can trust
- Complete post-test care for effective risk remediation
- Multi award-winning offensive security services
- Avg. >9/10 customer satisfaction, 95% retention rate
Resources
