XRAY CyberSecurity

Penetration testing services

XRAY CyberSecurity will simulate different attacker types,
depending on the knowledge level about the target objects

BlackBox — Zero Knowledge

GreyBox — Partial Knowledge

WhiteBox — Full Knowledge

The objects of testing can be both the infrastructure as a whole or individual IT-systems and components

External Network
penetration
testing

Get Quote

Internal Network
penetration
testing

Get Quote

Wi-Fi
penetration
testing

Get Quote

Social engineering
&
phishing attacks

Get Quote

Web-application, API,
Mobile-application, etc.
pentesting

Get Quote

Let's discuss
your specific
task!

Discuss

Pentest stages

Negotiations

NDA signing
Clarification of project conditions, scope and limitations terms
Service contract signing
Creation of a joint project workgroup
Rules of engagement signing

OSINT

Public information analysis
Basic network infrastructure analysis
Analysis of social networks, employees
Analysis of technical resources, forums, etc.
Search for compromised credentials

Enumeration & Scanning

Port scanning
Identification of services, applications and operating systems
Identification of network equipment and implemented security controls (waf, ips, ids, etc.)
Automated vulnerability scanning
Manual vulnerability identification

Attacks planning

Analysis of gathered information
Brute-force userlists & passlist development
Vulnerabilities verification and research
Development of compromise & privilege escalation scenarios
Toolkits and Exploits preparation, modification

Exploitation

Password brute-force attacks
Vulnerabilities exploitation
Chaining vulnerabilities in an attack scenarios to demonstrate the business impact of a compromisation
Identifying of application interactions and additional architectural or logical vulnerabilities
New attack vectors identification

Reporting

Recommendations development and negotiation
Providing of the report documents
Project debrief
Free Re-test to check the elimination of vulnerabilities (within 2 months)

The result of the security assessment is the Penetration Testing Report, which consists of two parts:
an Executive Summary and a Technical Report.

Order a call

PENTEST REPORTING

Part 1: Executive Summary

1. General information

1.1 Intro
1.2 Project scope
1.3 Methodology and objectives

2. Management report

2.1 Key findings
2.2 Business risks
2.3 Cybersecurity strategic state

3. Recommendations

4. Conclusions

Part 2: Technical Report

5. Technical report

5.1 Cybersecurity vulnerabilities
5.2 Scenarios, results and penetration evidences

6. Recommendations

6.1 Management recommendations
6.2 Technical recommendations

7. Appex 1 – Auxiliary data

7.1 OSINT Results
7.2 Scanning, exploitation results
7.3 Compromised credentials
7.4 Changes in information systems

*The report structure can be adapted to your requirements

Carlsberg Ukraine Kravchenko Andrii, CIO

In performing yet another penetration testing project, «XRAY CyberSecurity» demonstrated in-depth skills in assessing information security from both the technical and process sides. The detailed technical and business-oriented reporting was a useful and effective result of the project.

Eldorado.UA Pavlo Berezin, CIO

I am pleasantly surprised by the results of the penetration test of an application, wireless infrastructure, and external network. During the project, the «XRAY CyberSecurity» specialists demonstrated high technical and project management skills, and most importantly, all project goals were achieved.

VEON (Vimpelcom Global Services Ukraine) Bizyaev Ihor, CIO

The entire «XRAY CyberSecurity» team has perfect technical skills, excellent communication and organizational skills, and the ability to see the big picture in the most difficult situations. It was a pleasure to work with «XRAY CyberSecurity», and in particular with Illia. I have no doubt that I'll involve them in penetration testing again and again.

Zeppelin Ukraine Tereschenko Yaroslav, IT manager

I would like to thank you for the high-quality and timely implementation of the external network perimeter Penetration Test and internal network security assessment. The results allowed us to fix the existing issues and prevent compromise of the IT infrastructure.

Review of St. Paraskeva Medical Center's Executive Director

St. Paraskeva Medical Center Levchenko Dmytro,
Executive Director

It was extremely pleasant and useful to work with the «XRAY CyberSecurity» team on a very sensitive project for our company. The project team demonstrated excellent professional knowledge, as well as a really practical and flexible approach to our needs and expectations at every stage from initiating and defining requirements to presenting the audit results. I would definitely recommend «XRAY CyberSecurity» as a great professional and reliable partner!

Review of Carlsberg Ukraine's IT Security Manager

Carlsberg Ukraine Kozlov Ruslan, IT Security Manager

With each joint security assessment project, our company's cybersecurity level is significantly enhanced. Thank you for many years of cooperation and professionalism - many new attack vectors and unexpected testing scenarios help us to eliminate information security deficiencies in a timely manner and ensure business continuity.

Tedis Ukraine Mahov O.V., CIO

Thank you for the successful completion of the network penetration testing. The developed management and technical recommendations allowed us to improve the cybersecurity of our IT services against external attacks. I definitely recommend «XRAY CyberSecurity» as experts in conducting an IT infrastructure penetration test.