Description
Sophos Penetration Testing
Penetration testing delivered by the Sophos Red Team, evaluating your controls the way an adversary would rather than the way a scanner does.
A test is scoped, not generic. Sophos publishes separate service descriptions for penetration testing, wireless penetration testing, web application security assessment, mobile application security assessment and web API testing. Which one you need depends on what you are protecting, and getting that wrong wastes the engagement.
The testing services
- Penetration testing, internal and external.
- Wireless penetration testing.
- Web application security assessment and web API testing.
- Mobile application security assessment.
- Active Directory security assessment.
- Red team exercises, full spectrum and intelligence led, and purple team exercises.
Who delivers it
The Sophos Red Team, whose backgrounds span security research, threat intelligence, law enforcement and military. The findings are prioritized against real attack intelligence rather than presented as an undifferentiated list of issues.
Buying it as a one-off or through a retainer
Individual engagements can be scoped and quoted on their own. If you expect to run testing more than once a year, the Sophos Security Services Retainer covers testing through Service Units and usually works out better than repeated one-off procurement.
Frequently asked questions
What kinds of testing are available?
Penetration testing, wireless penetration testing, web application security assessment, web API testing, mobile application security assessment, Active Directory security assessment, and red and purple team exercises.
Who performs the testing?
The Sophos Red Team, a group with backgrounds across security research, threat intelligence, law enforcement and military.
Do I need to run Sophos products?
No. Testing is independent of which security products you use.
Is it cheaper through the retainer?
If you test more than once a year, usually. The Security Services Retainer covers testing through prepaid Service Units rather than separate engagements each time.
Nuformat delivers this too
This listing covers penetration testing delivered by the Sophos Red Team. Nuformat also runs its own goal-based testing, external, internal, wireless and web application, with a fixed scope and a 90-day retest. If you are weighing the two, see our penetration testing service and we will tell you honestly which fits your situation.
Arrange this through Nuformat
Nuformat is a Sophos partner serving Canada and the United States. Tell us your environment size and what prompted the enquiry, and we will scope the engagement and come back with a quote, usually in two to three business days.
Request a quoteService scope and delivery as published by Sophos. Pricing confirmed by Nuformat at the time of quotation.