Simplifying compliance and risk management

• DR/BCP Services
• Executive Team
• Application Security Assessment
• VA & Pen Testing
• Identity and Access Management Services

Network Vulnerability Assessments and Penetration Testing

Business Objectives Met:

• Satisfy regulatory requirements for periodic network scanning and penetration testing (e.g. PCI DSS 11.2 and 11.3.1)
• Discover vulnerabilities that could be exploited to compromise confidentiality, integrity, and/or availability
• Improve hardening and change management practices by educating system and network administrators on findings

Service Description

Whether you’re subject to regulatory standards such as the Payment Card Industry standard or simply looking to stay ahead of the vulnerability curve, periodic assessments of your external and internal network environment are a must. According to SC Magazine, “vulnerability assessment and penetration testing should be critical parts of all organizations’ security operations.” TruArx offers a variety of services to help you achieve your security goals.

Vulnerability Assessments

TruArx takes vulnerability assessments to the next level with our base-lining and benchmarking and zero false-positive options. At the core, our vulnerability assessments uncover exposures at the network, operating system and service application levels, including web and mail servers.

Our thorough reviews reveal whether a hacker can access your sensitive information and infrastructure. Base-lining and benchmarking then establish a set of standards for measuring and quantifying systems security levels. With a baseline, we derive a score (or benchmark) that compares relative security of a particular host to both the baseline and to other systems within your environment.

And because false positives are the single biggest issue with vulnerability assessments, TruArx adds our zero false-positive option to all assessments. We guarantee our vulnerability assessment findings will contain no false-positives, and we verify each finding for accuracy and validity.

Penetration Testing

TruArx adopts a hacker’s point of view to test the security of your network both inside and outside your organization. Test results detail, in layman’s terms, any determined vulnerabilities and how they can be used to gain access to your network. As with our other assessment services, we provide recommendations regarding how to close the “holes.” If requested, our Implementation Practice will even design and implement solutions to help.