PCI DSS Penetration Testing

Regularly test the security of network infrastructure
and applications for PCI Compliance

What is a PCI DSS penetration test?

PCI DSS Penetration tests are regular security assessments designed to identify and help fix vulnerabilities of external or internal network and applications

PCI requirements demand from organizations to perform security audits of network infrastructure and applications at least annually, in order to remain compliant

Our Methodology

Penetration testing on the Web Applications and Infrastructure. PCI DSS penetration testing is designed to include assessment of network infrastructure and applications from both outside and inside an organisation’s network.

The methodology is based on the PTES standard and OWASP (for web applications).

Segmentation

Host Discovery

Service Scanning and discovery

Scan for Vulnerabilities

Manual and automated exploitation

Post-exploitation & network privilege escalation

NAS and file servers takeover

SMB/Net-Bios exploitation

Credentials memory dump

Sniffing, spoofing and relaying

DNS vulnerability exploitation and exfiltration

Why trust CTD for your PCI DSS penetration test?

CTD's security engineers are part of GIAC Advisory Board, CISM Accredited and OSCP certified experts and helped many clients remain PCI DSS compliant with security audits on network and web applications

We are a security consulting company, founded by senior penetration testers and security managers, offering certified Cyber Security Services of highest quality possible, for clients in EMEA and Middle East

Relevant experience

What our customers say

The team is very professional, even going the extra mile caring for customer needs and all the details of the collaboration. This attention to detail both for the human factor and the technical expertise motivated me to have the ongoing project and wish to maintain this for the foreseeable future.

Catalin Priscornita

CEO, Blitz.ro

Cyber Threat Defense has been a valuable partner in securing our software. Their outside the box perspective has pointed us attack scenarios that we are now paying more attention to.
I recommend CTD. They will certainly improve the level of security in your company.

Andrei Andreias testimonial picture for Cyber Threat Defense

Adrian Andreias

CEO, hosterion.com

Need PCI DSS penetration testing?

Contact our offensive security experts today to discuss your requirements