penetration testing

BSM imitates hackers' attacks to determine if your network and internet connection is secure. This is called penetration testing. We have many servers, which can monitor parts of the internet from many different countries. We use these servers to monitor your company’s internet connection. We have special equipment and software in our lab in Purmerend, which allows us to carry out surveillance and test activities on the internet and on your Local Area Network and Servers. We draw up the areas which are at risk and inform you which penetration test your company needs in order to secure your company's data. Your supplier will always say that the delivered systems are secure- but how can you be sure?

Overview of the most frequently carried out penetration tests:
The basic scan and report level: This scan provides a basic overview of the security of your web environment. This level is especially suited to simple websites without active content. The scan offers moderate protection to defacement and cross-site scripting. This scan is fully automated.

1. Server and network penetration testing

1. Server and network penetration testing. This scan tests the node, the part of the server which hosts your website. If needed, the route to the server can also be scanned, for example the route to your firewall or your load balancer.

2. Penetration tests on applications

2. Penetration tests on applications. This scan is adapted to your specific web environment, such as the databases and the content management systems which your company uses. We use specialised software for penetration tests on applications, such as software which scans source codes.

3. Active surveillance and penetration testing

3. Active surveillance and penetration testing. What would you do if you were a hacker? We try to penetrate your system in many different ways. Think of the exploitation of human weaknesses (social engineering) and depth attacks with tools such as the metasploit framework and Qualys.


This in depth approach is very important for certain companies, especially if critical data such as financial data or credit card details are present on the system. It is very important that you can prove that you are well secured: This will prevent damage to your company’s image, can prevent claims and will guarantee your employees´ and business relations´ privacy.

Follow up penetration testing

Penetration tests are a part of the footprinting and scanning process. The outcome of the test will help you secure your networks and equipment. Our Website Security: consultants can help you design new policy or draw up an action plan.

If you want to have your web environment tested on security, you can read more about this topic on our Website Security pagina. We have concept reports available on demand. Please contact us for further details. Op verzoek hebben wij voorbeeldrapportages beschikbaar. U kunt hiervoor contact met ons opnemen of bellen naar 020-7500 880