Types of penetration test

  • External infrastructure: internet-facing systems tested from the outside.
  • Internal infrastructure: what an attacker could do once inside the network.
  • Web application and API: flaws in custom software, such as injection or broken access control.
  • Cloud configuration: permissions and settings in cloud platforms.
  • Social engineering: phishing and physical access tests.

Penetration testing vs EASM and vulnerability scanning

Vulnerability scanning is automated and broad. Penetration testing is human-led and deep, chaining weaknesses together to show real impact. EASM runs continuously to find what is exposed in the first place. A test only covers the scope it is given, so assets missing from the scope stay untested. Feeding EASM discoveries into test scoping closes that gap.

Getting value from a pen test

  1. Define the scope using an up-to-date asset inventory.
  2. Choose testers with recognised accreditation, such as CREST or CHECK in the UK.
  3. Fix findings by risk, then retest to confirm the fixes worked.
  4. Use continuous monitoring between tests, because the attack surface changes every week.

How DarkInvader helps

DarkInvader complements penetration testing. Continuous discovery finds assets that should be in scope, Vulnerability Scanning covers them between tests, and resolution tracking confirms fixes stay fixed. The founding team's background is in penetration testing.

Explore Vulnerability Scanning

Frequently asked questions

How often should we have a penetration test?

At least annually and after significant changes, such as a new application or major infrastructure change. Continuous monitoring should cover the time in between.

What is the difference between a penetration test and a red team exercise?

A penetration test aims to find as many weaknesses as possible within a defined scope. A red team exercise simulates a specific adversary over a longer period to test detection and response, usually with only a few people aware of it.

Is penetration testing required for Cyber Essentials?

No. Cyber Essentials Plus includes technical testing such as an external vulnerability scan and checks of devices, but it is not a full penetration test.

Related terms and reading

Sources