Automated penetration testing for all business sizes. CREST certified.
Our low impact penetration test helps you meet cyber insurance requirements AND keep your network secure.
Emerald Based, Automated Penetration Testing
vPenTest is SiteSupport’s automated network penetration testing platform that combines the knowledge, methodology, processes, and toolsets of a team of security consultants into a single, deployable platform for organizations of all sizes.
We help organizations to perform a penetration test within their environment at any given time, satisfying both compliance requirements as well as meeting security best practices.
This platform is automated by vPenTest and is based on a framework that continuously improves over time.
Key Concepts:
- Convenience: A full-blown penetration test, whenever you need, however often you need.
- Experience: Backed by 10+ years of experience and OSCP, CISSP, CEH, and OSCE certified consultants.
- Low impact: No after hours fees or scheduling around your business operation.
Key Benefits
- Backed by Experts: Combining the knowledge, skills, logic, and toolsets of numerous certified security consultants into one platform, vPen Test is the perfect solution to consistently satisfy your organization’s needs for quality results.
- Real-Time Activity Tracking: An important step to assessing your organization’s risk is the ability to detect and respond to malicious activities occurring within your environment. vPenTest creates a separate log file for every single activity that is performed so you can correlate our activities with your monitoring and logging solutions.
- Meet Compliance and Best Practices: By having the ability to perform a quality network penetration test whenever you want and however often you want, your organization can be assured that it will continuously meet security best practices and compliance regulations.
What & How Do We Test?
Our penetration testing combines multiple methodologies that were once manually conducted into an automated fashion to consistently provide maximum value to organizations.
Egress Filtering Testing
Automatically perform egress filtering to ensure that your organization is effectively restricting unnecessary outbound traffic. Unrestricted outbound access can allow a malicious actor to exfiltrate data from your organization's environment using traditional methods and unmonitored ports.
Authentication Attacks
Upon the discovery of user account credentials, vPenTest will automatically attempt to validate those credentials and determine where they are most useful. This is a common process executed by both malicious attackers and penetration testers and is performed during privilege escalation.
Privilege Escalation & Lateral Movement
Using a valid set of credentials, vPenTest will attempt to identify valuable areas within your organization. This is conducted through a variety of methods, including the use of vPenTest's Leprechaun tool which assists in identifying where sensitive targets are.
Data Exfiltration
Critical data leaving your organization is an extremely serious concern. If access to confidential and/or sensitive data can be attained, vPenTest will simulate and log this activity to help your organization tighten areas that should restrict data exfiltration.
Simulated Malware
With elevated access, vPenTest will attempt to upload malicious code into remote systems in an attempt to test the organization's end-point anti-malware controls.
Reports Available Within 48 Hours
Our detailed deliverables will allow your network staff to cross reference our activities with monitoring and alerting controls.
Internal & External
We offer two different network penetration testing services to guide your organization to a better security posture and program.
Internal Network Penetration Testing
Using a device connected to your internal environment, our consultants will discover security vulnerabilities present within the internal network environment. These activities simulate that of a malicious attacker.
External Network Penetration Testing
Assuming the role of a malicious attacker from the public Internet, our consultants will identify security flaws within your external network environment. These flaws can include patching, configuration, and authentication issues.
Our Team
At Site Support, we’re more than just IT experts—we’re your local, trusted technology partners. Based in Emerald, our team delivers personalised, responsive, and proactive IT support to keep your business running smoothly.
With 24 years of experience, we understand that every business is unique. That’s why we provide tailored solutions with care, reliability, and a people-first approach. From managed IT services to cybersecurity and cloud technology, we ensure you stay connected, secure, and stress-free.
We take the hassle out of IT so you can focus on what matters most—growing your business.
Why do a Penetration Test?
Demonstrate Real-World Risk
by simulating a malicious
threat actor
Evaluate
current security detection and
monitoring controls
Mitigate
against risk by providing
remediation strategies .
Common Questions & Answers
How often do I need to get penetration testing done?
You can have a test done as frequently as you like or as your compliance requires.
How much does penetration testing cost?
This will vary with how large your business is, but our system allows us to conduct testing for far less than traditional penetration testing methods.
Can you fix any issues the testing finds?
We can quote on remediation works if you wish. Our testing is independent so if you have an incumbent IT support provider, we can simply provide you with the results for them to remediate.
How do I know if the issues the test finds have been fixed?
You can request a package that includes a post remediation test.
Do I have to give you our network and Microsoft 365 credentials?
No. We require no network or cloud credentials in order to run our tests.