Penetrationstests

So arbeiten wir mit Ihnen

Eine bewährte 5-Schritt-Methodik durch Senior-Berater — planbarer Zeitplan, fester Umfang, vorstandsreifer Output.

01

Discovery

Scoping workshop with your team to map systems, risks and success criteria.

1–2 days
02

Proposal & SoW

Fixed-scope statement of work with deliverables, timeline and pricing.

2–5 days
03

Engagement

Senior consultants execute the work with weekly steering updates.

4–12 weeks
04

Reporting

Board-ready executive summary plus technical appendix and evidence pack.

1 week
05

Closeout

Handover, remediation tracking, optional retainer for follow-up.

ongoing

Was Sie erhalten

Jedes Engagement liefert konkrete Artefakte, die Ihr Team, Vorstand und Auditoren sofort nutzen können.

Executive summary

Board-ready PDF for non-technical stakeholders.

Technical findings report

Full evidence with reproduction steps and CVE/CWE mapping.

Machine-readable export

JSON/CSV for SIEM ingestion and ticket-system import.

Remediation roadmap

Prioritised action list with owner and effort estimates.

Compliance & Frameworks

Methodik abgestimmt auf die regulatorischen Regime und Industrie-Frameworks, gegen die unsere Kunden geprüft werden.

ISO 27001
NIS2
PCI DSS 4.0
OWASP ASVS
NIST 800-115

Tools & Methodik

Industriestandard-Tooling kombiniert mit Eigenentwicklungen aus hunderten Engagements.

Burp Suite Pro Nessus Metasploit OWASP ZAP Cobalt Strike Nmap BloodHound Mimikatz

Branchen, die wir bedienen

Vertikale Expertise aus regulierten und hochkritischen Umgebungen.

Financial Services
Public Sector
Healthcare
Energy & Utilities
Manufacturing
Telecommunications
Software / SaaS
Defence

Häufig gestellte Fragen

Die häufigsten Fragen aus Einkauf, Security und Compliance vor einer Beauftragung.

How quickly can the engagement start?

Project kickoff typically happens within five business days of contract signature. Emergency engagements (active incident, ongoing exfiltration) start same-day under our 24/7 incident response retainer.

What does the deliverable look like?

Every engagement produces a board-ready executive summary plus a technical appendix with full evidence, CVE/CWE mappings, reproduction steps and a prioritised remediation roadmap. Optional machine-readable JSON export for SIEM/ticket-system ingestion.

Which compliance frameworks do you align with?

Our methodology is aligned with ISO 27001, NIST CSF, NIS2, GDPR, DORA (financial), PCI DSS 4.0 (card-handling), and CIS Controls. Reports are produced to satisfy supervisory inspection in any of these regimes.

Do you work in our language?

WPROIT delivers reports in English by default; German, Turkish and other agreed locales available on request. Executive summaries are written for board-level audiences in the requested language.

Penetrationstests

So arbeiten wir mit Ihnen

Discovery

Proposal & SoW

Engagement

Reporting

Closeout

Was Sie erhalten

Compliance & Frameworks

Tools & Methodik

Branchen, die wir bedienen

Häufig gestellte Fragen

Verwandte Leistungen

Red-Team-Einsätze

Lasttests

Cyber-Bedrohungsaufklärung

Wo wir Penetrationstests liefern