Penetration Testing
Expert Penetration Testing Services in Canada
CDW has run thousands of penetration testing engagements and focused on cybersecurity for more than 15 years. Talk to one of our security consultants to find the vulnerabilities in your environment and learn how to fix them.
Book a Penetration Test
What is penetration testing?
Penetration testing simulates real-world attacks to find vulnerabilities before malicious actors exploit them. Think of it as hiring ethical hackers to see where your defences break. A pen test uncovers hidden weaknesses, improves your overall security and keeps your sensitive data protected.
Our penetration testing approach
Read the CDW Offensive Security Services Overview (PDF) for a full breakdown of how we work. →
Testing methods
Depending on the specific objectives of your business, we offer several methods of testing:
- Zero-knowledge testing: testing with no prior information about the target, network or application
- Partial-knowledge testing: testing with some information about the target, network or application
- Full-knowledge testing: testing with full information about the target, network or application
The industry standards we use
We follow industry best standards for every pen test:
- Open Web Application Security Project (OWASP) testing guide: used for web application vulnerability assessments and penetration tests
- OWASP Mobile Top 10: used for mobile vulnerability assessments and penetration tests
- Penetration Testing Execution Standard (PTES): used for intelligence gathering, social engineering, wireless and network penetration tests
- NIST technical guide to information security testing and assessment (SP 800-115): a general approach for conducting security testing and assessments
- MITRE ATT&CK Framework: development of specific threat models and methodologies
What we deliver
We provide a report that summarizes the penetration testing work we conducted. The report includes:
- An executive summary of results
- Testing methodologies, phases and tools used
- Detailed vulnerability findings, recommended fixes and the effort required to remediate
- A description of attack scenarios or exploitation activity
- An optional presentation of the critical vulnerabilities and findings
New to penetration testing?
A core penetration test is a good option if your company is new to penetration testing.
CDW's Core Penetration Test evaluates and exploits the common attack paths in your environment. Our security team explores your potential risk exposure and gives you recommendations to fix the findings from the test. Testing your defences against common tactics helps you improve your security posture and prepare for future security events.
Read the Core Penetration Test Overview (PDF) to learn more →
Why CDW for penetration testing?
Manual Approach
We don't just run an automated tool and generate a report. We put real effort into emulating how a threat actor would break into your network.
We'll Keep on Testing
If we compromise your environment, we don't stop there. We step back and look for every other way to reach the same objective.
We Consider Your Organization
Every organization has different critical assets. We focus on what matters most to you while we run the test.
Depth of Experience
We have deep experience running network penetration testing and infrastructure tests in complex, highly sensitive environments.
Breadth of Experience and Knowledge
We've tested across every industry vertical in Canada and bring the knowledge of our full team to your engagement.
Security Experts
Our consultants have helped organizations of every size. We design security controls and processes that fit your organization.