Offensive Security
Remediation Retest
Verification testing of fixed findings from a previous penetration test, with an updated report and an attestation letter for customers and auditors.
Testing only starts after we receive written authorisation from the system owner and both sides sign off the scope and rules of engagement.
Overview
We confirm each fix actually closes the issue and give you documentation you can share with customers and auditors.
What you get
- Retest of every agreed finding
- Updated report with closure status
- Attestation letter
How we work
- 01Confirm scope and fixed findings
- 02Verification testing
- 03Updated report and letter
More Offensive Security services
- Web Application Penetration TestAuthenticated, manual testing of web applications against the OWASP Web Security Testing Guide and ASVS, including business-logic and access-control flaws.
- API Penetration TestTesting of REST and GraphQL APIs against the OWASP API Security Top 10: broken object-level authorisation, authentication, rate limiting and token handling.
- Mobile Application Penetration TestStatic and dynamic testing of iOS and Android apps against OWASP MASVS and MASTG: data storage, transport security, reverse engineering and backend APIs.
- Network Penetration TestExternal and internal infrastructure testing following PTES: exposed services, Active Directory attack paths, lateral movement and network segmentation.
- Cloud Penetration TestAdversarial testing of AWS, Azure and GCP environments: IAM privilege escalation, exposed storage and services, and cross-account trust abuse.
- Red Team & Social EngineeringObjective-based adversary simulation mapped to MITRE ATT&CK, including phishing campaigns and assumed-breach scenarios, to test detection and response.
Have a project to scope?
Tell us your objectives and constraints. We reply within one business day.