PENETRATION TESTING

DETECTION SERVICES

Pentest as a service

from Germany for

Companies

Organizations

Concerns

CONSULTING

SOLUTION SERVICES

Trainings

EDUCATION SERVICES

PENTEST AS A SERVICE

What is penetration testing as a service (PTaaS)?

Nowadays, IT security cannot be imagined without penetration tests. As a rule, these are carried out every year to protect against hackers and their consequences. For groups and companies that are active in software or product development, a pentest that is carried out once a year is not sufficient.

Our solution to this requirement achieves a penetration test as a contract model called “ Pentest as a service”. This service enables penetration tests that are individually tailored to the company, for example on a monthly or quarterly basis, as required.

Penetration testing certifications and standards

Classic vs. Pentest as a Service

So what are the key differences between the classic penetration test and the “ pentest as a service” contract model?

For every regular penetration test, you need about 1/4 – 1/3 of the project time for the organization (project management) and the creation of the documentation for a proper (legally correct) implementation. With the Pentest as a Service model, we reduce this time and financial overhead considerably, as we can repeatedly carry out a test phase in an agreed period.

These regular checks improve your IT and create optimized time and priority management through assigned work packages for internal implementation. We would like to explain further differences in the following table.

Classic Pentest Vs. Pentest as a Service

For whom is penetration testing as a service useful?

This service model is most suitable if you meet one of the following points:

We require regular penetration tests
We are legally required to carry out a penetration test
We lack manpower to act on the findings

How does Pentest as a service work in practice?

In Kritis environments, it is often a framework contract that regulates when which systems should be tested on-site. We work with you to develop a model that suits you, of course, free of charge, anything else would be simply dubious.

For simple design in medium-sized companies or group

We will coordinate the exact requirements with you in a free appointment. In a kick-off appointment, test periods (what should be tested when and in which cycles) and configure a remote gateway in your network.

For security reasons, this should only be switched on when testing is to be carried out, if the ” Penetrator box” – as we call it, meets the highest standards (BSI basic protection, ISO27001 ), we know too well that there are always residual risks. If the data still be too sensitive, we also offer a classic Onsite model (penetration tester on-site).

Either way – it is a quality service that has to be individual. Therefore, only after meeting and getting to know your needs, we can prepare and give you an insight into how the model can help you.

Learn more about "Pentest as a service"

We would be happy to show you what a “Pentest as a service” has to offer in our opinion. Just give us a call or use the contact form!

Inquire now