Services
Overview Cybersecurity solutions Penetration testing SOC Digital forensics & incident response Audit & Advisory GRC Security awareness & training Social engineering IT staffing & placement
Partners
Use cases
Overview Infrastructure & network Unified secure network Industrial infrastructure Wi-Fi network Zero Trust access (ZTNA) Cloud & identity Microsoft 365 / Azure migration Privileged access (PAM) Active Directory Corporate email Detection & response Detection capability (SOC) Responding to a compromise Vulnerability management Compliance & resilience Preparing for ISO 27001 ICT Minimum Standard DORA regulation Business continuity (BCP/DRP) Human factor Reducing human risk
Clients
Company
About Certifications Careers CSR commitments
Contact
FRENDE

Penetration testing

Measure how your systems actually hold up by reproducing an attacker's behaviour — in a controlled, documented setting, with no impact on production. It is the offensive half of your cybersecurity programme.

Offensive cybersecurity

Think like an attacker, without the risk.

We reproduce the full path of an attack — from the exposed surface through to your data — to reveal what a real adversary could actually reach.

ExternalInternalApplicationRed Team
Typical attack path in a penetration test ATTACK PATH Internetattack surfacePerimeterfirewall · VPNApplicationweb · mobileActive Directorylateral movement Dataobjective
Services

Services in detail

External penetration testing

Assessment of the perimeter exposed to the Internet: services, applications, information leaks and access paths from outside.

Internal penetration testing

Simulation of an attacker already on the network: lateral movement, privilege escalation and Active Directory compromise.

Application penetration testing

Web, mobile and thick clients assessed against OWASP (ASVS/MASVS): business logic, authentication, injection and access control.

Red Team & Purple Team

Objective-driven attack scenarios, with or without the defence team involved, mapped to MITRE ATT&CK, to test your cybersecurity end to end.

Industrial infrastructure & OT

ICS/SCADA environments assessed with an approach built around availability and safety constraints.

Embedded systems & IoT

Hardware and software analysis: debug interfaces, firmware, radio communications and proprietary protocols.

Artificial intelligence systems

LLM- and agent-based applications: prompt injection, exfiltration, guardrail bypass (OWASP LLM Top 10).

Code review

Static and manual source code analysis to fix vulnerabilities at the root, before they reach production.

What you get

Deliverables & approach

  • Report prioritised by real risk
  • Reproducible proof of exploitation
  • Actionable remediation plan
  • Technical and executive debriefs
  • Retest to confirm the fixes
Request a quote
Methodology

How a test unfolds

  1. 1
    Scoping
    Scope, objectives and rules of engagement agreed with you.
  2. 2
    Reconnaissance
    Mapping of the exposed surface and enumeration of services.
  3. 3
    Exploitation
    Confirmation of vulnerabilities and initial access.
  4. 4
    Lateral movement
    Privilege escalation and progression towards critical assets.
  5. 5
    Debrief
    Prioritised report, remediation plan and retest.
Related use cases

This service in practice

Industry & OT
Securing an industrial infrastructure
Access & identity
Regaining control of privileged access
Compliance & governance
Preparing for ISO 27001
Directory & tiering
Hardening Active Directory
Vulnerabilities
Managing vulnerabilities continuously
Zero Trust access
Replacing the VPN with Zero Trust access

Let's talk about your scope.

A technical conversation, with no commitment, to frame your need and propose the most relevant engagement.

Contact us