The objective of access control testing is to examine the quality, resilience and strength of various aspects of the target application. Various manual testing scenarios will be deployed to ensure that access control mechanisms respond and function securely and appropriately. We would typically test with & without user credentials.

Using all the intelligence observed and gathered during the reconnaissance and access control testing activities, Risk Crew will deploy various methodologies that are appropriate to the target environment. The over- all objective of this phase is to attempt to exploit the vulnerabilities identified to obtain unauthorized access or permissions and verify the security integrity of the target environment. This is the critical component of the testing.

Upon test completion, we’ll draft a detailed report of our findings and recommendations. The report will be comprised of “plain English” executive summary as well as a detailed technical description of each vulnerability identified, the associated risk level, visual evidence of its exploitation (where applicable) and step-by-step directions for its remediation.

Once you have remediated any vulnerabilities identified in our testing, the service also includes “complimentary” re-testing to verify remedial actions were effective. Upon completion of the re-testing, we’ll provide you with a summary report verifying remedial measures have been implemented.