What is Pen Testing?

Nexon’s engagement starts by crafting a Network Attack Blueprint to ensure we target all the key areas to obtain access to your corporate network, web applications, wireless networks, end users and perimeter services in a structured and safe way.

Your Penetration Test includes:

  • Comprehensive Penetration Test Report with all evidentiary
  • information, screenshots, repeatable steps and recommended remediation activities
  • Executive Level Summary Insights
  • Webapp Reports and Retest Reports for each App
  • Supplemental Documents such as; Raw Data, Phishing Site, Password
  • Audit, Jack-in Assessment and Vulnerability Scans
  • Presentation to Stakeholders

Services We Offer

Penetration Testing (Pentest) is where we perform an assessment of an organisation’s security, from the position of a malicious attacker using the same tools and techniques as real threat actors in the wild. This includes an assessment of your risks, threats, vulnerabilities, and overall security posture, in a safe and structured manner.

White Box

Penetration testers are given full access to source code and architecture, providing a full assessment of internal and external vulnerabilities from an informed source.

Grey Box

Penetration Testers perform an assessment with some information or access provided by the organisation, such as IP addresses or user credentials to focus efforts on high-risk areas. 

Black Box

Penetration Testers perform an assessment of the organisation with no information except the company name, to investigate and target vulnerabilities exploitable from outside of the network. 

Team Certifications

▪ CREST Registered Penetration Tester (CREST CRT)

▪ CREST Practitioner Security Analyst (CREST CPSA)

▪ Practical Network Penetration Tester (PNPT)

▪ Offensive Security Certified Professional (OSCP)

▪ Offensive Security Wireless Professional (OSWP)

▪ EC-Council Certified Ethical Hacker (CEH)

▪ EC-Council Certified Security Analyst (ECSA)

▪ EC Council Licensed Penetration Tester (LPT)

▪ Certified Information Systems Auditor (CISA)

▪ Certified Information Systems Security Professional (CISSP)

▪ Certified ISO 27001 Lead Auditor (BSI)

▪ Certified ISO 20000 Lead Auditor (BSI & APMG)

▪ Certified ISO 31000 Lead Trainer

▪ CompTIA Security+

▪ AWS Certified Security Specialist

▪ CompTIA Network+

▪ CompTIA Linux+

▪ CompTIA Security +

▪ CompTIA Certified Technical Trainer (CTT+)

▪ Microsoft Certified Professional (MCP)

▪ Microsoft Certified Technology Specialist (MCTS)

▪ MCITP Enterprise Administrator (MCITP)

▪ MCITP Server Administrator (MCITP)

▪ VMware certified Professional (VCP)

▪ VMware Technical Sales Professional (VTSP)

▪ Cisco Certified Network Associate (CCNA)

▪ ISACA Certified Data Privacy Solutions Engineer (CDPSE)

▪ Netskope Cloud Security Integrator (NCSI)

▪ Okta Certified Professional

▪ AttackIQ Certifications

▪ Netskope Cloud Security Administrator (NCSA)

Team Breakdown

  • All Australian based testers
  • All permanent staff
  • Security Vetted & Police Checked
  • Located on the East Coast
  • Service Australia Wide & Globally