securitywebpenetration-testingpenetration-tools

Web Pen Testing Recomendations - Tools & External Contractor Recommendations


I'm not sure if this is even an appropriate question for SO but I'll go ahead anyway as I'm not sure.

I've been looking at Pen Testing tools for my current project and have found a number of them but ultimately there is no getting away from taking this seriously and looking to a professional organisation or individual that specialises in performing this kind of work.

The reason for looking for tools is simply to enable me to pick off the low hanging fruit before initiating a full pen testing cycle. This should also hopefully make that process cheaper as I will hopefully have addressed all the obvious vulnerabilities.

Tools & Resources

Organisation & Individuals

I'm wondering if there are any resources out there that rate and review organisations performing these tasks? Are there any organisation that you could recommend that you have used previously with good results?


Solution

  • @Jammer, I am not sure if there exists such a rating that you are looking for. My personal view would be ,make a study of your requirements-whether you are looking for a certification or a compliance or just trying to increase security. Based on these criteria,you can look at the pentesting organisations and evaluate them on your own. This link may help,

    http://www.ivizsecurity.com/blog/penetration-testing/how-to-choose-penetration-testing-companies/

    Anyways there is always a trade off between choosing third party vendors or owning a own security team. You can go for third party consultation then have a own in-house Security Educated QA Team.

    Hope this helps.