Plan a useful penetration test.
Start with the decision in front of you. The objective guide helps define what to test; the report guide shows how to turn the result into work for a system owner. The other guides explain testing approaches and where they fit.
Plan the test and use its result
- Assessment objectives
- Work through a backup-server example to choose the target, starting access and evidence your test needs.
- Reading a penetration test report
- Check an example conclusion against its evidence and prepare a useful handoff to the system owner.
Understand automation and autonomy
- Autonomous pentesting
- How software can pursue an assessment objective and use its results to choose further tests.
- AI pentesting
- Where AI contributes to an assessment, and why the evidence matters more than the label.
- Automated pentesting
- The work testing tools can automate and what remains for the person running the test to decide.
Plan an adversary exercise
- Red teaming
- The goal-driven adversary exercise, how it differs from a pentest, and what autonomous red teaming changes.
- Agentic red teaming
- Red teaming run by AI agents that choose their own moves, and how that differs from red-teaming AI systems.
Choose the starting access and deployment
- Internal network pentesting
- Plan the starting position, authorized ranges and evidence for an employee-to-finance assessment.
- Agentless pentesting
- Testing reachable systems from a deployed host without a persistent testing agent on each target.
- Assumed-breach pentesting
- Test what a specified employee or other starting identity can reach beyond its intended access.
Understand the access you are testing
- Active Directory pentesting
- Examine how directory permissions, exposed credentials and trusts can lead to wider access.
- Domain Admin
- What domain administrator access allows, how it is established, and where its boundaries lie.
- Ransomware readiness
- How access testing contributes to readiness, alongside containment and recovery exercises.
See the concepts in a run
Put a concrete question to the test.
Choose an objective and review the campaign scope before deployment.
Contact