Infrastructure Testing
Infrastructure is vital to the day-to-day operation of any organisation, whether that be the entire enterprise network or just critical infrastructure. Were a threat actor able to gain access to a network, it could have wide-ranging consequences and could ultimately lead to them gaining full access to critical internal resources and potentially even preventing its operation, e.g. ransomware
Infrastructure Testing
Testing your infrastructure is a critical step in securing your environment and ensuring that systems are deployed in a way that enhances the security of your employees, customers and any other IT resources owned or used by your organisation.
External infrastructure testing assesses the security posture of your public facing networks, the networks that can be found over the internet. As these networks are required to be publicly accessible, this makes them an easy, high-risk target. North Star will test to ensure that only the services you expect are present and that these services do not offer an attacker a route inside the organisation.
Internal infrastructure testing focuses on the security of your internal networks, those that are available to people within or connected to your organisation. The most likely exposure here is from an insider threat. However, it can also include external threat actors who have managed to gain access to your internal network.
What we do
Features of this service
How we work
Strategic scoping call with our leading technical advisor to find out your exact requirements
Tailor a roadmap to exactly what you need. We look to partner with our clients and be the trusted advisor they need
Our onboarding process is streamlined and smooth to ensue there is little to no disruption to your service
Your continuous security plan will give you the confidence in your security trusting an accredited professional partner is on hand 24/7
How we do it
North Star will engage with the client to determine their requirements and ensure that the engagement is correctly scoped to deliver on those requirements and make sure all of the correct legal requirements are satisfied.
North Star will engage with the client to determine their requirements and ensure that the engagement is correctly scoped to deliver on those requirements and make sure all of the correct legal requirements are satisfied
This phase helps obtain information about available services, potential versions of the services and get a general understanding of the environment that will be tested
Using all of the information gathered in the reconnaissance phase, North Star will determine where the potential risk of exploitation lies and create a plan to verify those findings
During this phase, and as agreed with the client in the pre-engagement phase North Star will attempt to exploit any vulnerabilities or misconfigurations identified in the previous phases to confirm that the risk exists
Depending on the agreed approach for exploitation, North Star may also attempt to gain further access from the compromised host(s) further into the client’s network or attempt to obtain sensitive information
As with all of North Star services, we will provide detailed expert advice in our report to help align your infrastructure with industry best practice security standards
As far as is possible, the systems tested will be returned to their pre-test state to remove any uploaded files or elevated accounts that were created
Our Happy Customers
From a business perspective, North Star provide an efficient, thorough, and cost-effective security service which has benefitted thinkmoney considerably over the course of the last year.
From a business perspective, North Star provide an efficient, thorough, and cost-effective security service which has benefitted thinkmoney considerably over the course of the last year.
Their knowledge in the subject matter was excellent and I found them easy to engage, personable and approachable.
It’s really refreshing to work with experts who act as an extension of our team. North Star don’t stop at identifying issues, they are happy to work with us to solve them too.
If you are looking for a company to really deliver on the service they are offering, I would look no further. Very quick and easy process. They completed the report within a tight timeframe and offered plenty of helpful advice!
Let's talk
We’re here to help! Submit your information or call the office on +44 (0)1243 670 854 and a member of our team would be happy to help.
Contact us
