🚀 go-pugleaf

There are some folks at Trident Data Systems that do it much
better than any of the folks you listed.  Check out their web-site
at http://www.tds.com and call the Virginia office.  Make sure
you get the commercial side, though...I think they are called
the IP team or ISIS or something...

alan_streetfield@my-deja.com wrote:

> I need to commission a security test (penetration test) of my
> company's Internet connection, and I'm looking for a comparison
> of the various penetration testing services that are available.
>
> Does anyone know of any independent reviews of penetration testing
> services, or any other comparisons that could be useful?
>
> I'd also like to hear your experiences (good and bad) of penetration
> testers to help me make a smart choice!
>
> So far, I've discovered the following penetration-testing organisations:
>
> - ICSA (they do lots of certification and also have a pentest service);
> - IDsec (a UK-based consultancy house);
> - NTA Monitor (A specialist penetration testing house); and
> - Verisign (the CA people).
>
> I'm sure that there's lots more, but the trick will be to find the
> good ones!
>
> I'll be posting a summary of my findings to the net once I've
> gathered the information.
>
> Best Regards,
>
> Alan
>
> Sent via Deja.com http://www.deja.com/
> Share what you know. Learn what you don't.

That's quite a strong statement - have you actually compared
their services with the other companies?  If so, what key
attributes did you use to decide that they "do it better"?

If you've done a comparison, I'd be very interested to see how
all the different providers stacked up.  However, I'm afraid
that simply saying that "x are the best" doesn't really help.

Alan

In article <3756E4AE.3E9FF6D4@patriot.net>,
  keydet89@yahoo.com wrote:
> There are some folks at Trident Data Systems that do it much
> better than any of the folks you listed.  Check out their web-site
> at http://www.tds.com and call the Virginia office.  Make sure
> you get the commercial side, though...I think they are called
> the IP team or ISIS or something...


Sent via Deja.com http://www.deja.com/
Share what you know. Learn what you don't.

I agree, they have done RealSecure for Checkpoint. Get the eval
version and monitor what the testers are trying to do with Your
network...

Paja


On Thu, 10 Jun 1999 07:35:25 GMT, Brian@laing.pissoff.com (Gollum)
talked to the black hole:

>Alan,
>
>	Depending on where you are at you may want to look at
>www.iss.net.  Along with security software we also do various
>consulting services.
>
>Cheers,
>Brian
>

Alan,

	Depending on where you are at you may want to look at
www.iss.net.  Along with security software we also do various
consulting services.

Cheers,
Brian

Here's a quick update on my search for a good penetration
testing service.

I've had a disappointing response so far to my request for
independent comparisons of Internet security testers posted
a couple of weeks back.  Almost all posts and Emails were
from people pushing their own product - all claiming to be
"the best", without any evidence to support this boast.

Doesn't anyone know of a comparitive study or review of this
topic, or is it just that pentesting is still in it's infancy
and isn't yet mainstream enough for people to bother with
comparisons?

Anyway, to repeat my request: I'd like to hear from anyone
with knowledge (good or bad) about penetration testing services.
I'd especially like to hear from anyone who can compare different
providers.  However, I don't want any more "we are the best" type
plugs!

Alan

In article <7iulo6$kbo$1@nnrp1.deja.com>,
  alan_streetfield@my-deja.com wrote:
> I need to commission a security test (penetration test) of my
> company's Internet connection, and I'm looking for a comparison
> of the various penetration testing services that are available.
>
> [snip]


Sent via Deja.com http://www.deja.com/
Share what you know. Learn what you don't.