English
Deutsch
The idea behind the assignment of a Red Team is to not simulate a hacker attack on your own company, it is about getting one executed. Red teaming is not bound to any pentesting framework conditions or structured approaches. The red team's goal is to penetrate as deeply as possible into the network by any means necessary, for which the identification of a single vulnerability as an entry point is sufficient. For example, a social engineering attack to obtain access credentials would be a valid approach. In comparison to classical penetration testing, red teaming has not the goal to identify all possible attack vectors, so it is the oposite of our usual well structrured pentesting approach. Nevertheless the personal fun factor for our penetration testing team is much higher for red teaming, because they can just put in all the techniques and tools they have without thinking about they might miss a vulnerability or need to be carefull. It is all weapons on deck. Red teaming is basically ordering a professionell hacking team and telling them, let's have fun.
Since 2013 our certified penetration tester team conduct pentest for IT infrastructures, web applications and mobile APPs (iOS / Android) and using a structured approach based on all relevant publications. As a service provider evaluate the identified and exploited vulnerabilities based on the associated business risk and compiling it into a report that contains a summary for the IT management and the technical details of the vulnerabilities identified. After you fix the vulnerabilities, we usually perform a retest without any additional charge.
Pentest use the same tools and techniques that real attackers would use to break into a system. It includes the use of security tools and carrying out manual tests to uncover vulnerabilities. Thus is it not a automatic vulnerability assessment. On the contrary, as a service provider for penetration testing we are using the same tools and techniques that real attackers would use to break into a system. But while a real attacker only needs to find and exploit one vulnerability, a penetration tester checks all relevant attack vectors.
Having a structured approach is one of the most important factors to achive this in order to provide a professional pentesting service. This is also important when performing a Red Teaming pentest. Our approach is based on all relevant standards and publications.
Pentest are always a compromise between effort and cost, to get a reasonable price. Successful pentest offer a good balance between these criteria to facilitate the testing of all relevant attacks and attack vectors. The cost of such a test always depends on the time the penetration tester spends and on the extent and complexity of the IT system or web applications. While a penetration test for a small application takes only some days, it can take several weeks for a large network or complex application.
For a pentest offers we do require prior information about the systems and applications that are to be examined. It is important that we get an initial impression of the target. For web applications, for example, test access can be helpful. Any additional information, e.g. the framework etc., can make it easier for us to draft a suitable offer for you. If you need us to pentest an IT system, we will need the corresponding network addresses in advance. In this particular case, we will first perform a non-invasive network scan to get a first look at your network. We will provide a detailed offer once we can estimate the effort required.
binsec GmbH is your german security service provider for penetration testing. Get in touch with us for your Red Teaming pentest offer - order your pentest today!
binsec GmbH is the german professional penetration testing company for your Red Teaming pentest. Get a pentest offer and order the pentest without typical sales nonsense. Talk to experts instead to pre sales consultants. Better pentesting. No nonsense. As a company for professional penetration testing, we do some things differently than other pentest provider: As a penetration test firm, we do not sell vulnerability scans as pentest. We do also focus on business security risks. You are looking for a professionally conducted penetration tests? Get the binsec team for your Red Teaming pentest pentest!