Initial Penetration Test

A guided introduction to the security of your website

Description

This service is tailored to companies that require a penetration test for the first time.

Whether you need to confirm the adequacy of your security measures following an incident, comply with newly applicable legal requirements, or satisfy a client’s request for an in-depth review of your security posture, this pentest offering is designed for you.

Typical Costs

This is an all-inclusive offer. For 10.000€ we offer you:

  • One day of consultation by a senior consultant with the aim of defining your requirements
  • A customized pentest for your website that addresses your requirements
  • A detailed report summarizing the results of our pentest
  • An additional day of consultation with the same consultant, helping you determine your next steps towards a secure website

Procedure

Initial Contact

Please submit your enquiry using our contact form or send an email to mail@jubeco.de

In urgent cases, you can call us by phone on +49 221 1704 3078.

Preliminary Discussion

In the preliminary meeting, we will work with you to clarify:

  • Which website or APIs need testing
  • Which attack scenarios are likely, given your market position
  • How best to allocate personnel, financial, and time resources

Using this information, we will propose various scopes that suit your needs and resources.

We will also provide a cost estimate at this stage to help you make an informed decision.

Commissioning

You will receive a proposal that includes a detailed description of the requirements defined during the preliminary discussion.

Once we receive your order, we will ask you to designate a technical contact so we can finalize the implementation details of your pentest.

Final Report

After the pentest is complete, we will provide a detailed report based on your requirements. This report typically includes:

  • A management summary
    • A general assessment of the test object’s security
    • An overview of the steps needed to achieve the required security level
  • A technical summary for the developers or system administrators, which contains for each finding:
    • An assessment of criticality
    • A technical description
    • Recommended mitigation measures

Closing Discussion

In this session, we will present the final report to you and your team, advising on how to effectively implement the findings in your organization. Depending on your needs, this consultation may include

  • Targeted support to remediate the vulnerabilities identified in the pentest
  • Establishing a development process that inherently reduces such vulnerabilities
  • Introducing additional security measures to promptly detect and counter attacks
  • Further training for technical staff
  • Adopting risk management practices in your organization
  • Discussing potential future attack scenarios that may arise as your company continues to grow
essential