Scoping and rules of engagement
A written scope, testing windows and emergency contacts agreed before anything starts.
Service 01 / 12Penetration testing
Penetration testing
services in London.
We test your systems the way a real attacker would, with your permission and within agreed limits. You get a clear picture of what could be reached, and exactly how to close it.
Last reviewed
What it is,
and why it matters.
A penetration test is a controlled, authorised attack on your systems. Automated scanners find known weaknesses; a tester goes further, chaining small issues together to show what someone could actually achieve.
Every test starts with a scoping conversation. We agree what is in bounds, when testing happens and who to call if we find something urgent, so there are no surprises for your team or your customers.
A good fit if…
- You are launching a new website, app or platform
- A client, insurer or tender has asked for a pen test
- You have made major changes to your network or cloud setup
- You want independent evidence that your controls work
Everything you need,
nothing you don't.
Manual testing
Hands-on testing that goes beyond scanner output to find logic flaws and chained weaknesses.
Risk-ranked findings
Every issue rated by real-world impact, not just a severity score from a tool.
Executive summary
A short, plain-English overview your board and clients can read.
Technical detail
Evidence and step-by-step remediation guidance for your developers or IT provider.
Retesting
Once fixes are in, we check them and update the report.
Four clear
steps.
- Step 1
Scope
We agree targets, depth, timing and contacts.
- Step 2
Test
Our testers work through your systems, keeping you updated on anything critical.
- Step 3
Report
Findings ranked by risk, with clear remediation steps.
- Step 4
Retest
We confirm the fixes worked and close out the report.
Types of penetration test
A
Web application penetration testing
Websites, portals and APIs, tested against authentication, access control, injection and business-logic flaws.
B
Network penetration testing
External testing of what faces the internet, and internal testing that assumes someone is already inside.
C
Cloud penetration testing
Configuration and access review of your cloud accounts, storage and identity setup.
D
Mobile app penetration testing
iOS and Android apps, including the APIs and data storage behind them.
What affects
the cost.
1
Scope
The number of applications, IP addresses or user roles in scope.
2
Depth
A focused external test takes less time than a full internal and application assessment.
3
Complexity
Custom applications with many roles and integrations need more testing time.
4
Timing
Out-of-hours testing to protect live services can affect the schedule.
We give a fixed quote once the scope is agreed, so you know the cost of a penetration test before any work starts.
Get a quoteQuestions,
answered.
It depends on scope and depth. A focused test of one web application costs far less than a full internal network assessment. After a short scoping call we give you a fixed quote.
Most tests run for a few days to two weeks of testing time, followed by the report. We agree the timeline with you before starting.
Testing is planned to avoid disruption. We agree testing windows, avoid destructive techniques on live systems, and contact you immediately if anything unexpected happens.
A scan is automated and lists known weaknesses. A penetration test is carried out by a person, who confirms which weaknesses are real and shows how they could be combined to cause harm.
At least once a year, and after any significant change such as a new application, a cloud migration or a major network change.
Further
reading.
Next stepLet's talk about
Let's talk about
penetration testing.
A short call, no obligation. We'll listen, ask a few questions and suggest a sensible first step.
ContactStart with
Start with
an assessment.
Tell us a little about your business. We'll arrange a short, no-obligation conversation and suggest a sensible first step.
Studio
The Leather Market
London Bridge