[127374] in North American Network Operators' Group
RE: Penetration Test Vendors
daemon@ATHENA.MIT.EDU (Chris Gravell)
Thu Jun 24 14:39:12 2010
From: Chris Gravell <chris.gravell@green.ch>
To: "nanog@nanog.org" <nanog@nanog.org>
Date: Thu, 24 Jun 2010 20:38:58 +0200
In-Reply-To: <001201cb1262$84840290$8d8c07b0$@net>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Pen-testing for what?
-----Original Message-----
From: Scott Berkman [mailto:scott@sberkman.net]=20
Sent: Wednesday, June 23, 2010 1:28 AM
To: 'Ken Gilmour'; 'George Bonser'
Cc: nanog@nanog.org
Subject: RE: Penetration Test Vendors
If I wanted someone to do this, I'd probably look at a security vendor
instead of a general purpose consulting firm.
Some examples off the top of my head might include IBM's ISS and
SecureWorks.
-Scott
-----Original Message-----
From: Ken Gilmour [mailto:ken.gilmour@gmail.com]=20
Sent: Tuesday, June 22, 2010 4:58 PM
To: George Bonser
Cc: nanog@nanog.org
Subject: Re: Penetration Test Vendors
Depends on where you are... I've used Sysnet in Europe (www.sysnet.ie) and
they are excellent. We used Deloitte (
http://www.deloitte.com/view/en_GX/global/services/enterprise-risk-services=
/
security-privacy-resiliency/pcidss/index.htm)
in non-european countries, with not such a good result (but other people ma=
y
have different experiences).
Regards,
Ken
On 22 June 2010 14:48, George Bonser <gbonser@seven.com> wrote:
> Anyone have any suggestions for a decent vendor that provides network
> penetration testing? We have a customer requirement for a third party
> test for a certain facility. Have you used anyone that you thought did a
> great job? Anyone you would suggest avoiding?
>
> Replies can be sent off list and I will summarize any feedback I might
> get from the community if anyone is interested.
>
> George
>
>
>
