Penetration Testing insights
Insights from CREST-certified practitioners on the threats, regulations and technologies shaping cyber security.
Penetration Testing · page 3
25 to 36 of 40 articles
The Penetration Tester’s Toolkit | Nmap, Burp Suite and Beyond
A practical penetration testing tools list covering Nmap, Burp Suite and other essentials, plus a sample pen testing workflow and tips to read the output.
Read article · 6 min
Azure Penetration Testing: Top 5 Attack Vectors Every Security Team Should Know
Azure penetration testing exposes the attack vectors adversaries exploit most, from Azure AD abuse to misconfigured storage accounts. Learn how to fix them.
Read article · 8 min
How to Perform Cloud Penetration Testing in AWS
How to perform AWS penetration testing: the shared responsibility model, enumeration, tools and common IAM misconfigurations, plus hardening tips for AWS.
Read article · 12 min
What Is Continuous Threat Exposure Management (CTEM) and Why It Matters in 2025
Continuous threat exposure management (CTEM) is a cycle for finding and fixing the exposures attackers use. Learn the CTEM framework and why it matters.
Read article · 6 min
What Is Penetration Testing A Complete Guide for UK Businesses
Penetration testing is an authorised simulated attack that finds exploitable weaknesses. Learn the types, black, white and grey box methods, tools and process.
Read article · 8 min
How Penetration Testing Supports ISO 27001 and Cyber Essentials Plus Compliance
Does ISO 27001 require penetration testing? See how pen testing maps to ISO 27001 controls, supports Cyber Essentials Plus and gives auditors clear evidence.
Read article · 7 min
Penetration Testing vs. Vulnerability Scanning
Penetration testing vs vulnerability scanning: scans find known weaknesses, pen tests exploit them to show real risk. Learn when you need each and how often.
Read article · 12 min
Why Penetration Testing Reporting Is the Unseen Pillar of Cyber Resilience
What should a penetration test report include? Clear risk ratings, an executive summary and remediation guidance that turns findings into business decisions.
Read article · 5 min
How Often Should You Conduct a Penetration Test?
How often should you do a penetration test? Most organisations test at least annually and after major changes. Learn how to set penetration testing frequency.
Read article · 12 min
Beyond the Report: The Strategic Value of Penetration Testing Documentation
What should a penetration test report include? Learn the anatomy of a high-impact report and how auditors and boards use pen testing documentation to act.
Read article · 11 min
API Penetration Testing: Why Traditional Methods Fall Short
Traditional pen testing fails for APIs because it misses business logic abuse, complex authentication and mass enumeration. See what API testing needs.
Read article · 20 min
Every IT Environment Is Vulnerable: Why Securing Tier Zero Must Be Your Top Priority
What is Tier Zero? It covers your most privileged assets, such as domain controllers. Learn how attackers reach it and the measures that close attack paths.
Read article · 7 minNo articles match that search. Try a broader term.
Get expert threat intelligence in your inbox
A monthly briefing on emerging threats, regulatory changes and practical defence advice. No spam, unsubscribe anytime.