Penetration testing is a vital to confirming the resilience and effectiveness of security systems – and to pass your PSN IT Health Check. For any public body that lacks the relevant cybersecurity skills in house, the National Cyber Security Centre (NCSC) has introduced CHECK – a scheme for verifying trusted third parties who can perform the necessary penetration tests on your behalf.
Every CHECK certified business – like Fidus – employ engineers who hold NCSC approved certifications, and who are skilled in conducting authorised penetration tests. The results of any CHECK penetration testing will result in a standardised report built to NCSC specifications.
Penetration testing is vital
Your security defences are critical to protecting the sensitive data you store. But it is only with penetration testing that you confirm technology and processes are effective.
CHECK verifies a provider’s capabilities
CHECK verified providers have been approved by the NCSC and are trusted to work with sensitive data and systems.
Reduces your overheads
Outsourced penetration testing allows your in-house team to focus on other strategic projects without compromising the quality or depth of the assessment.
A stepping stone to certification
Proving the resilience of your IT security is essential to achieving key public body certifications, including NHS DSP and ITHC.
CHECK qualified engineers ‘attack’ your firewall and network assets to prove that defences are properly configured and secured against unauthorised network incursions.
Physical security testing
Cybercriminals may also come through the front door – literally. Fidus engineers will test the systems and processes that control physical access to your sites.
Phishing and social engineering attacks
Fidus consultants will use common social engineering techniques like phishing emails to elicit sensitive data and passwords direct from employees, exposing urgent training requirements.
Red Team scenarios
To gain a complete understanding of security provisions, our engineers can conduct a full-scale cyberattack to test your use of people, processes and technology.
Penetration testing reveals your most sensitive network vulnerabilities – so you need a partner you can trust. Fidus Information Security are an NCSC CHECK Green Light and TIGER scheme approved consultancy. Our cyber security experts hold some of the most recognised certifications in the industry, including CREST Certified Tester and Senior Security Tester. Fidus is also a Cyber Essentials verified company. Every assessment we perform is carried out according to UK industry approved methodologies (OWASP, PETS, NIST) along with our own internal testing frameworks.
More than just identifying security vulnerabilities, our cyber security experts are on hand to help you fix them too.
Certified Security Consultants
Our CREST and TIGER approved team holds a range of industry-leading security certifications including OSCP, CCT, SST and CISSP
Easy to Understand Reports
We’ll ensure that your executives and technical teams properly understand our assessment findings using plain-English reporting.
Fixed Price Proposals
The price you’re quoted is the price you’ll pay. Our quotes are broken down into a detailed costing table so you know exactly what to expect.
Other approaches we've witnessed have included convoluted steps and commonly ends with incorrect information being handed to the consultant assigned to the engagement.
Our approach to security involves a qualified security consultant through the entire process to ensure quality, accuracy and consistency.
“Becoming CREST certified shows Fidus’ commitment to ensuring we maintain the highest standards of policies and procedures within our company.” Fidus Information Security have gained CREST accreditation for penetration testing services. We are extremely proud to announce that we are now a Council for Registered Ethical Security Testers (CREST) accredited company for penetration testing services. […]
Exploiting the eRosary Application In this post we’re going to cover a trivial full account takeover vulnerability our team identified within the new eRosary application, whilst placing an order for the watch! The ClickToPray eRosary beads are advertised as ‘an interactive, smart and app-driven device that serves as a tool for learning how to pray […]