Services
Penetration Testing
Together with our partners, we test your systems from an attacker's point of view, within a scope we agree on beforehand and with your knowledge. In the end, we give you a written report on what is exposed, how serious it is and how to close it.
- A written scope agreed in advance
- Findings are reported in order of severity
- A debrief meeting after the report
In brief
7 Tepe Bilişim runs penetration tests together with its partners: your systems are tested from an attacker's point of view, within a scope agreed in writing beforehand and with your knowledge. The test can cover the external network, the internal network, a web application and configuration. It differs from a vulnerability scan in that it also tests how far the weaknesses found can actually be used. In the end, we give you a written report on what is exposed, how serious it is and how to close it.
Is this for you?
A good fit if
You have services open to the internet (website, VPN, remote access, e-mail) and want to know how they look from the outside. You want to test your security level after a big change (new server, firewall, application). Your customers or your management want a written security assessment.
Not a fit if
A software scan output is enough for you (that is a narrower job than a penetration test). You do not want to agree on the scope and time window on your live system; the test is not done without a written scope.
What we offer
We work in 5 areas; the quote lists item by item which of them are in scope.
External network test
Testing the addresses and services you expose to the internet.
Internal network test
Testing what a user or device that has reached your network can access.
Web application test
Testing the application you choose for login, authorization and data flow.
Configuration review
Reviewing firewall, server and remote access settings from a security point of view.
Verification of findings
Retesting the vulnerabilities you have closed (if included in the scope).
How it works
Scope and permission
Which systems, which dates, which methods; we agree on these together, in writing.
Information gathering
We work out what the systems in scope show from the outside.
Test
We run a controlled test in the agreed window, taking care not to disrupt the service.
Report and review meeting
We write the findings in order of importance and go through the results with you.
Retest
If agreed, we test the fixed findings again.
What we deliver and what is out of scope
What we deliver
- Scope and method summary
- Findings list: severity, affected system, evidence and recommended fix
- Executive summary (for non-technical readers)
- Post-report meeting
Out of scope
- Systems whose scope is not defined in writing
- Fixing the findings (can be done as a separate project)
- Load and outage tests that could cause a service interruption (unless agreed separately)
- A statement that you meet legal or regulatory requirements
Frequently asked questions
If your question is not here, write to us; we will clarify the scope together.
Ask a questionWill the test break our systems?
Tests are done in the agreed window and in a controlled way; if a risky step is needed, we talk to you first.
How long does it take?
It depends on the scope; once the scope is clear, we state the time in writing.
Is a penetration test the same as a vulnerability scan?
No. A scan lists known weaknesses; a penetration test also tests how far the weaknesses found can actually be used.
What is the price?
The price is given with a quote, based on the scope.
Related services
Cyber security
Cyber Security
Managed IT
Managed IT Services
KVKK technical consulting
KVKK Technical Consulting
Let's define the scope together.
Tell us what you need; we will set the scope and the quote together.