Characteristics

Penetration testing (Pen Testing) is a test that seeks to identify all potential vulnerabilities, threats, and risks that an attacker could exploit in operating systems, networks, desktop/web software applications to gain unauthorised access to IT systems. To detect and exploit existing vulnerabilities, QAVALUE employs a five-step methodology. First, information recollection; second, threat modelling; third, vulnerability analysis; fourth, exploration; and finally, reporting. By doing so, QAVALUE covers the classes of vulnerabilities contained in the Penetration Testing Execution Standard (PTES), among other standards.

Infrastructure and network systems, operating systems, Desktop/Web/Mobile Applications, on cloud or on premises

White box
Gray box
Black box

Pen Tester
Security Auditor

• Scope

Functional
Non-functional

Manual & Automated

• Product quality - Security