Fennec Security

What methodologies are carried out for the testing?

Well known methodologies such as OWASP, OSSTM and PTES are followed for security testing, and CVSS standard to assess the risk level of the vulnerabilities found.

How long will it take to perform a Penetration Test for my business?

It depends in the service to be performed and the size of the application or the number of hosts to test in case of a network penetration test. A scoping call will be scheduled in advance to provide an accurate quote and testing time for the project.

How can they ensure the confidentiality of our data during the penetration test?

Strict confidentiality agreements (NDAs) will be signed to ensure the complete protection of your company's information.

What is the risk mitigation and vulnerability remediation process like?

If a critical-risk vulnerability is found, it will be reported immediately for prompt correction. For all other vulnerabilities, the details will be included in the technical report for your technical team to address, following the security recommendations provided in the report.

How can I know if my team has addressed the remediations properly?

Two retests are included with the service after the remediation of the reported vulnerabilities in order to make sure that all the vulnerabilities were remediated in a secure way. Fennec Security Guarding your digital frontier.