Home / Security Testing & Assurance

Security Testing & Assurance

Penetration Testing & Vulnerability Assessment

Test web applications, APIs, networks and agreed systems to identify weaknesses and prioritise remediation.

Start your enquiry
  • Web Applications
  • APIs
  • Internal / External Networks
  • Blackbox / Greybox
  • Retesting

SERVICE IN DETAIL

From the first assessment to practical outcomes

Who this service is for

IT and development teams preparing a release, validating security improvements or checking business-critical systems.

How we work

  1. Scope & rules of engagement

    Web applications, APIs, internal and external networks, user roles and test boundaries

    Agree the targets, access levels, test window, business constraints and stop conditions. Confirm written authorisation and prepare the accounts, network access or test data needed for the selected assessment.

  2. Testing & validation

    Authentication, access control, input handling and exploitable weaknesses

    Combine relevant tools with analyst review for the agreed test objectives. Validate findings, capture reproducible evidence and distinguish confirmed issues from results that need additional information or investigation.

  3. Remediation & retest

    Validated vulnerabilities, business impact and verification of agreed fixes

    Explain business impact, affected components and actionable fixes in a technical report and management summary. Where agreed, retest corrected issues and record their status without treating untested systems as covered.

What you receive

  • Agreed scope and test plan
  • Technical findings with evidence and remediation priorities
  • Executive summary and agreed retest record

Relevant frameworks and guidance

Before we begin

We confirm the scope, responsibilities, evidence, timetable and deliverables in the proposal. The activities above are tailored to the systems and objectives agreed with your organisation.

Discuss your scope

Specialist services

Mobile Application Security Assessment

Assess iOS and Android applications through security testing, findings analysis and agreed remediation verification.

View scope, process and deliverables

Who this service is for

IT and development teams preparing a release, validating security improvements or checking business-critical systems.

How we work

  1. Scope & rules of engagement

    iOS and Android builds, backend APIs, test identities and device conditions

    Agree the targets, access levels, test window, business constraints and stop conditions. Confirm written authorisation and prepare the accounts, network access or test data needed for the selected assessment.

  2. Testing & validation

    Local storage, network communication, authentication and platform interaction

    Combine relevant tools with analyst review for the agreed test objectives. Validate findings, capture reproducible evidence and distinguish confirmed issues from results that need additional information or investigation.

  3. Remediation & retest

    Mobile-specific findings, reproduction evidence and agreed build retesting

    Explain business impact, affected components and actionable fixes in a technical report and management summary. Where agreed, retest corrected issues and record their status without treating untested systems as covered.

What you receive

  • Agreed scope and test plan
  • Technical findings with evidence and remediation priorities
  • Executive summary and agreed retest record

Relevant frameworks and guidance

Discuss this service

Source Code Security Review

Review application source code and scan results to identify insecure patterns and provide practical remediation guidance.

View scope, process and deliverables

Who this service is for

IT and development teams preparing a release, validating security improvements or checking business-critical systems.

How we work

  1. Scope & rules of engagement

    Repositories, programming languages, critical code paths and review access

    Agree the targets, access levels, test window, business constraints and stop conditions. Confirm written authorisation and prepare the accounts, network access or test data needed for the selected assessment.

  2. Testing & validation

    Scan triage, insecure data handling, secrets and authorisation logic

    Combine relevant tools with analyst review for the agreed test objectives. Validate findings, capture reproducible evidence and distinguish confirmed issues from results that need additional information or investigation.

  3. Remediation & retest

    Code-level remediation guidance and verification of corrected patterns

    Explain business impact, affected components and actionable fixes in a technical report and management summary. Where agreed, retest corrected issues and record their status without treating untested systems as covered.

What you receive

  • Agreed scope and test plan
  • Technical findings with evidence and remediation priorities
  • Executive summary and agreed retest record
Discuss this service

Artificial Intelligence Assisted Penetration Testing

Use AI-assisted testing within an agreed scope, with expert review of findings and a prioritised remediation report.

View scope, process and deliverables

Who this service is for

IT and development teams preparing a release, validating security improvements or checking business-critical systems.

How we work

  1. Scope & rules of engagement

    Authorised targets, AI-assisted tooling boundaries and human review checkpoints

    Agree the targets, access levels, test window, business constraints and stop conditions. Confirm written authorisation and prepare the accounts, network access or test data needed for the selected assessment.

  2. Testing & validation

    AI-assisted discovery and test prioritisation with expert validation

    Combine relevant tools with analyst review for the agreed test objectives. Validate findings, capture reproducible evidence and distinguish confirmed issues from results that need additional information or investigation.

  3. Remediation & retest

    Human-verified findings, reproducible evidence and practical remediation

    Explain business impact, affected components and actionable fixes in a technical report and management summary. Where agreed, retest corrected issues and record their status without treating untested systems as covered.

What you receive

  • Agreed scope and test plan
  • Technical findings with evidence and remediation priorities
  • Executive summary and agreed retest record
Discuss this service

Wireless Network Penetration Testing

Test agreed wireless networks and access controls to identify weaknesses and guide secure configuration.

View scope, process and deliverables

Who this service is for

IT and development teams preparing a release, validating security improvements or checking business-critical systems.

How we work

  1. Scope & rules of engagement

    Approved SSIDs, locations, wireless architecture and guest-network boundaries

    Agree the targets, access levels, test window, business constraints and stop conditions. Confirm written authorisation and prepare the accounts, network access or test data needed for the selected assessment.

  2. Testing & validation

    Authentication, encryption, segmentation and unauthorised access paths

    Combine relevant tools with analyst review for the agreed test objectives. Validate findings, capture reproducible evidence and distinguish confirmed issues from results that need additional information or investigation.

  3. Remediation & retest

    Wireless control findings and secure configuration recommendations

    Explain business impact, affected components and actionable fixes in a technical report and management summary. Where agreed, retest corrected issues and record their status without treating untested systems as covered.

What you receive

  • Agreed scope and test plan
  • Technical findings with evidence and remediation priorities
  • Executive summary and agreed retest record
Discuss this service

Performance & Load Testing

Evaluate application behaviour under agreed workloads to identify bottlenecks and inform capacity planning.

View scope, process and deliverables

Who this service is for

IT and development teams preparing a release, validating security improvements or checking business-critical systems.

How we work

  1. Scope & rules of engagement

    Critical journeys, user volumes, transaction mix and agreed performance targets

    Agree the targets, access levels, test window, business constraints and stop conditions. Confirm written authorisation and prepare the accounts, network access or test data needed for the selected assessment.

  2. Testing & validation

    Controlled workloads, response times, error rates and resource bottlenecks

    Combine relevant tools with analyst review for the agreed test objectives. Validate findings, capture reproducible evidence and distinguish confirmed issues from results that need additional information or investigation.

  3. Remediation & retest

    Performance results, capacity observations and prioritised tuning recommendations

    Explain business impact, affected components and actionable fixes in a technical report and management summary. Where agreed, retest corrected issues and record their status without treating untested systems as covered.

What you receive

  • Agreed scope and test plan
  • Technical findings with evidence and remediation priorities
  • Executive summary and agreed retest record
Discuss this service

Vulnerability Assessment & Scanning

Identify vulnerabilities in agreed systems, validate findings and prioritise remediation. Scanning scope and any retesting are defined for the engagement.

View scope, process and deliverables

Who this service is for

IT and development teams preparing a release, validating security improvements or checking business-critical systems.

How we work

  1. Scope & rules of engagement

    Asset lists, authenticated scanning options and agreed scan windows

    Agree the targets, access levels, test window, business constraints and stop conditions. Confirm written authorisation and prepare the accounts, network access or test data needed for the selected assessment.

  2. Testing & validation

    Vulnerability discovery, false-positive review and exposure prioritisation

    Combine relevant tools with analyst review for the agreed test objectives. Validate findings, capture reproducible evidence and distinguish confirmed issues from results that need additional information or investigation.

  3. Remediation & retest

    Vulnerability register, remediation owners and agreed rescan evidence

    Explain business impact, affected components and actionable fixes in a technical report and management summary. Where agreed, retest corrected issues and record their status without treating untested systems as covered.

What you receive

  • Agreed scope and test plan
  • Technical findings with evidence and remediation priorities
  • Executive summary and agreed retest record
Discuss this service
LET’S UNDERSTAND YOUR NEEDS

Tell us what
you need.

Answer the service-specific questions, review your summary, and send your request to our team.

A high-level summary is enough. Please do not include passwords, payment card data or confidential system evidence.

Read our privacy notice

For urgent matters, call 091 003 4852

Discuss your requirements directly with our team.

Contact our team

Related services

Security Testing & Assurance

Cyber Risk Assessment

Connect critical assets, threats and existing controls to business impact and a practical risk treatment roadmap.

↗
Security Testing & Assurance

IT Audit & Control Review

Review IT controls using evidence to support governance, oversight and practical improvement.

↗
Security Testing & Assurance

Cloud Security & CSA STAR Readiness

Prepare cloud services for a structured security review with clear responsibilities, control evidence and a remediation plan.

↗