Quick navigation

FireEye

Mandiant Penetration Testing Services from FireEye

Learn exactly how vulnerable your most critical assets are to cyber attacks

Value Proposition

Problem

Organizations do all they can to protect their critical cyber assets, but they don’t always systematically test their defenses. They should conduct regular Penetration Testing exercises to strengthen their security for those assets by pinpointing vulnerabilities and misconfigurations in security systems.

Solution

Penetration tests conducted by Mandiant Consultants are customized to your environment; no two assessments are ever the same. A wide variety of penetration testing options are available, with each option providing information that can dramatically improve security in your organization

Main Activities

Target reconnaissance: Mandiant consultants gather information about your environment, including company systems, usernames, group memberships and applications.
Vulnerability enumeration: Mandiant security professionals seek to identify your exploitable vulnerabilities and determine the best way to take advantage of them.
Vulnerability exploitation: Penetration testers attempt to realistically exploit the identified vulnerabilities using a combination of publicly available exploit code, commercial penetration testing tools and customized exploit code and tools.
Vulnerability exploitation: Penetration testers attempt to realistically exploit the identified vulnerabilities using a combination of publicly available exploit code, commercial penetration testing tools and customized exploit code and tools.
Mission accomplishment, which may be in the form of Mandiant experts gaining access to your internal environment via the Internet, stealing data from segmented environments or subverting a device with malicious commands.

Report: Technical details that include enough information to recreate our findings
Report: Fact-based risk analysis so you know a critical finding is relevant to your environment
Report: Tactical recommendations for immediate improvement
Report: Strategic recommendations for longer-term improvement

Key Differentiators

Trusted advisor to organizations globally with over 10 years of experience dealing with advanced threat actors from around the world
Mandiant supports organizations during the most critical times after a security breach has been identified, and proactively helps them improve their detection, response and containment capabilities
Penetration tests leverage Mandiant’s deep knowledge of advanced persistent threats and attacker behavior, using the same tools, tactics and procedures seen every day during their incident response engagements

Tests are custom-tailored to your environment and needs, assessing specific aspects of your security program and the state of security of your critical systems, networks and applications.
Leveraging all the intelligence gained from years of experience responding to the most sophisticated threat actors.