Penetration Testing

The ultimate verification of a potential vulnerability is to actually exploit it to compromise the system under test, and EWA-Canada is a recognized leader in conducting successful penetration tests. Our experience covers the full range of penetration testing from sophisticated penetration testing of core security technologies using custom-developed exploits to successful no-knowledge penetration tests of networks to “capture the flag” using a variety of technical and social engineering techniques. We have also conducted penetration testing against specific technologies and network nodes, including the development of custom exploits, given full knowledge of system design, configuration and functions.

Similar to VA testing, we follow a systematic methodology to conduct penetration testing,and work with our clients to ensure the proposed test approach and risks are understood prior to any testing being conducted, and that an exit criteria is negotiated and agreed upon (e.g. ability to read a specific file, ability to create or modify a database record, etc.).

Please Contact Us for further information.