Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 0 down vote favorite

As our company is growing in size we've decided its time for a PenTest. We'd like to do several pentests. One on our actual stie hosted off site on a dedicated provider. One of our internal office network and one physical pen-test.

Does anyone have recommendations as to solid independent companies that can provide the pentests described above? We'd like them them to probe and prove vulnerabilities and see if they can compromise systems and then provide a thorough debrief with recommendations for mitigation.

The physical pen-test is secondary but we believe strongly that social engineering is a heavy risk and want to mitigate for it. We feel an actual test on our office will be a strong wake up call to our users but want to make sure we use a known reputable company.

If anyone has advice to provide as to how we should better structure the pentests or goals to aim for that'd be appreciated as well.

share|improve this question
1  
This has to do with product/service recommendation, which isn't really encouraged here. – Terry Chia Jun 28 '12 at 0:58
Hi Cogito, as @TerryChia commented, product (and service) recommendations are not really a good fit for our sites. I would suggest two things: change your question, instead of asking for specific companies, ask how to compare companies, or how to tell if a particular company is worth using. (Though I think this may have been asked already). Also, you could definitely hit up some of the regulars of IT Security Chat, I'm sure you can get some ideas there. – AviD♦ Jun 28 '12 at 7:21

closed as not constructive by AviD♦ Jun 28 '12 at 7:23

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or specific expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, see the FAQ for guidance.