Penetration Testing is the Cyber Security discipline of attempting to break into software or networks of computers to see how far an attacker could get, either stealthily or noisily depending on scenario. Common types of Penetration Testing include:

• External Penetration Testing – from the Internet trying to get inside the company’s network
• Internal Penetration Testing – from inside the company’s network (assume breach)
• WiFi Penetration Testing – from outside the company’s network testing the security of the WiFi at physical premesis
• Social Engineering – Phishing campaigns to test Cyber Security Awareness
• Web Application Penetration Testing – attacking a specific web application (on the Internet or Internal Company Network)
• API Penetration Testing – attacking specific APIs (on the Internet or Internal Company Network)
• Mobile Application Penetration Testing – attacking mobile applications and their APIs (Android and iOS)
• Cloud Penetration Testing – attackers trying to break into a company’s AWS, Azure, GCP

Find Cyber Security Consultancies that deliver these services on CyberMarket.com - Sign Up now to post a project and Cyber Security Consultancies will silently bid on your project.

Application Security Testing is the analysis and testing of specific applications for weaknesses and vulnerabilities that an attacker could leverage. Common types of Application Security Testing include:

• Web Application Penetration Testing – attacking a specific web application (on the Internet or Internal Company Network)
• API Penetration Testing – attacking specific APIs (on the Internet or Internal Company Network)
• Mobile Application Penetration Testing – attacking mobile applications and their APIs (Android and iOS)
• Secure Code Review – Reviewing the source code of the application for specific vulnerability types
• Secure Composition Analysis – Reviewing the libraries and components of the application for specific vulnerabilities

Find Cyber Security Consultancies that deliver these services on CyberMarket.com - Sign Up now to post a project and Cyber Security Consultancies will silently bid on your project.

Small Businesses have a need for a Chief Information Security Officer’s (CISO) guidance and steering of their Cyber Security programs but they often are not large enough businesses to have employ a full time CISO.

Step in Virtual CISOs (vCISO) - They provide CISO expertise and guidance on a consultation basis which may be utilised on a package of a number of days per year, or on a specific Daily Rate.

Each vCISO has their expertise and background. Find vCISOs that deliver these services on CyberMarket.com - Sign Up now to post a project and vCISOs will silently bid on your project.

Engaging Third Parties who are providing you with Software including Software as a Solution (SaaS) – Then you have a Third Party Cyber Risk on your hands (also called Vendor Cyber Risk).

Engage a Cyber Security Consultancy to provide a Third Party Cyber Risk Assessment of a Vendor on your behalf where you can find out what Cyber Risks you have by storing your data with each Vendor.

This involves a Cyber Security questionnaire being sent to the Vendor and requesting them to complete it. The questions usually cover Cyber Security topics based on different Cyber Security Standards such as NIST Cyber Security Framework, ISO 27001, and SOC 2 Type 2 reports.

Find Cyber Security Consultancies that deliver these services on CyberMarket.com - Sign Up now to post a project and Cyber Security Consultancies will silently bid on your project.

The Security Operations Centre is the place where the Cyber Security Monitoring and Detection categories of the Cyber Security Standards take place. SOC Analysts utilise their “eyes on glass” analytical skills to review Security Incident Event Monitoring (SIEM) alerts and provide triage and investigation into alerts that may have recently taken place.

Often supplemented by Threat Hunters and supported by Incident Responders, SOC Analysts have their finger on the pulse of what is happening on the company’s network.

Find SOC Analysts that deliver these services on CyberMarket.com - Sign Up now to post a project and SOC Analysts will silently bid on your project.

Cloud Security involves the Architecture, Design, Governance Risk and Compliance (GRC), Penetration Testing, Security Operations and other Cyber Security Services focusing on the Public Cloud Service Providers such as Amazon Web Services (AWS), Microsoft Azure and Google Cloud Platform (GCP).

Looking for a Cloud Security Architect to review and build Cyber Security Architecture in a Public Cloud?

Or maybe you need advice on Cloud Security best practices from a technical expert from a GRC perspective?

Find Cyber Security Consultancies that deliver these services on CyberMarket.com - Sign Up now to post a project and Cyber Security Consultancies will silently bid on your project.