Requirements5 min read
Penetration testing or DORA TLPT: which engagement do you need?
Separate a defined technical test from advanced testing obligations that apply to designated financial entities.
Read the perspectiveINSIGHTS & GUIDES
Clarity before you begin.
Practical reading for the people who scope, procure and act on a penetration test.
6 guides
Delivery5 min read
Business logic testing: prove the approval boundary
Test actor, object and workflow state together, with synthetic orders and independent read-back.
Read the perspectiveDelivery5 min read
Cloud and CI secrets: from exposure to demonstrated authority
Trace an exposed build credential through its identity, audience and permitted operations.
Read the perspectivePlanning4 min read
Penetration test remediation: what counts as closed?
Agree reproducible acceptance criteria, preserve legitimate use and make residual risk visible.
Read the perspectiveDelivery5 min read
Network penetration testing: identity and segmentation together
Distinguish a reachable port, an authenticated session and permission to perform an operation.
Read the perspectivePlanning5 min read
A penetration testing scope that providers can price
Create a comparable brief with named systems, test roles, safeguards, evidence and retesting.
Read the perspectiveNo guides match this search. Try “scope”, “testing” or choose All topics.
LET’S START A CONVERSATION
Define the scope.
Take the next step.
Your systems, operating constraints and security objectives. A clear starting point for the test.
Discuss your pentest