Testing Services

Ensuring the security of an organization's networks as well as of its Internet, Intranet and Extranet applications is the primary concern for the top management. As applications, networks and vulnerabilities keep on emerging continuously, so a strategic, systematic, periodic and focussed security program can be used as the key for the solution. SISA managed security services provides the solution for their clients.


Vulnerability Assessment: SISA vulnerability assessment services help the organization in Identifying, quantifying and prioritising the vulnerabilities in a system. SISA owns a number of licensed proprietary tools for assisting the pretty experienced team to do the assessment. SISA is one of the leading ASV’s in the market.
SISA vulnerability assessment services based on the organization’s business requirement first identifies the security threats and then based on those threats tries to identify the vulnerabilities associated with the systems and helps the organization in the mitigation of those vulnerabilities.

Application Vulnerability Assessment: SISA assesses the application related vulnerabilities that can hamper the availability, integrity and confidentiality of the sensitive data and establishes the priority on eliminating the vulnerabilities or their potential impact over the organization.

 

Internal Application Vulnerability Assessment: SISA helps in identifying the vulnerabilities available inside their application that can be exploited from their internal network by visiting onsite or using the VPN connectivity and also helps in mitigating the vulnerabilities of the applications.

External Application Vulnerability Assessment: SISA helps in identifying the vulnerabilities and mitigating the risk associated with the applications of the organizations that are exposed over the internet.

Network Vulnerability Assessment: SISA team evaluates all the vulnerabilities associated with the entire network infrastructure based on their business need.   SISA helps in revealing and mitigating all the potential security vulnerabilities and changes in the network that could be exploited by attackers before they are taken advantage of.

 

Internal Network Vulnerability Assessment: SISA helps the organization in identifying and mitigating the vulnerabilities that can be exploited from inside the network by doing onsite visit or by using the VPN connectivity of the client.

External Network Vulnerability Assessment: SISA team helps in identifying the vulnerabilities that can be exploited while sitting outside the network and also assist in mitigating all the vulnerabilities related issues.


Penetration Testing: Penetration testing is performed to probe the target host or network to discover security vulnerabilities, known as software bugs, configuration problems and unnecessary network services, and to gather sensitive information to gain access to the host or network. SISA penetration testing services team simulates a real world attack on the organization’s network first by using some best licensed proprietary tools and then manually to gain access to the host or the network. SISA takes due care of the organization’s services that it doesn’t get interrupted.

Application Penetration Testing: SISA team does attack simulations which are meant to expose the effectiveness of an application's security controls by highlighting risks posed by actual exploitable vulnerabilities.

 

Internal Application Penetration Testing: SISA perform penetration testing while residing inside the network viz. by doing onsite visit or by using the VPN connectivity to the organizations network.

External Application Penetration Testing: SISA performs the penetration test on the public facing applications through internet.

Network Penetration Testing: SISA organizes and iteratively tests the target environment from the most general components to the most specific which highlight the risk from the largest, most complex environments down to the most simple, and anywhere in between.

 

Internal Network Penetration Testing: SISA do network penetration testing on internal servers and network devices by automated tools as well as manually. For doing internal network penetration testing onsite visit or VPN connectivity is required.

External Network Penetration Testing: SISA do network penetration testing on external facing servers and public network devices remotely over the Internet.


Source Code Review: SISA managed code review provides a systematic approach for examination of computer source code. SISA code review team intents to identify and fix the mistakes overlooked in the initial phase of development so that it cannot be exploited by attacker.

Training:
SISA managed training provides the training to the organization in terms of bringing awareness and how to keep their information, network and services secure from outside network.
SISA managed security services do provides training in Risk assessment, PCI awareness, etc.