Security mandatePenetration Testing
Penetration Testing is an authorised test of your systems, applications or processes, agreed in writing. Our specialists look for weaknesses before attackers exploit them, and assess the actual business risk.
A vulnerability scan asks
Are there known vulnerabilities?
and
A penetration test asks
What can an attacker actually achieve with these vulnerabilities?
Specialists link vulnerabilities together, check whether they can be exploited and assess the consequences for operations and data. A scan is usually not enough for this.
Test types
The duration depends on the scope and the number of systems. The figures are guide values for carrying out the test.
3 to 5 working days
Everything that can be reached from the internet, such as firewall, remote access and mail server.
5 to 10 working days
The company network from the perspective of a logged-in device, including user management.
5 to 10 working days
Web applications and interfaces, with and without login.
3 to 5 working days
Settings and permissions with your cloud providers.
running for 2 to 4 weeks
A phishing simulation that tests how staff behave.
When it makes sense
Before new systems or applications go live.
After major changes to infrastructure or applications.
For clients or insurers.
For systems with client or financial data.
How it runs
Goal, scope, time window and ground rules are set out in writing.
You confirm the target systems in writing. For cloud services, we check the provider’s rules.
Within the agreed framework and time window, with a contact person for queries and for stopping the test.
Risk assessment and action plan, within 5 working days of the end of the test.
On request, we check whether the findings have been resolved.
The report
The report is confidential and goes only to your organisation. It describes findings and how to resolve them, but contains no instructions for exploiting them.
For management, in plain language.
With description, impact and severity.
Prioritised, with recommendations for remediation.
So that the assignment remains traceable.
Prices
You receive a quote with a fixed price. The guide prices apply to a typical scope.
Starting point
from CHF 6’900
fixed price, excluding VAT
All test types
| Package | Guide price |
|---|---|
| External network test | from CHF 6’900 |
| Web application | from CHF 8’900 |
| Cloud configuration | from CHF 7’900 |
| Internal network test | from CHF 12’900 |
| Social engineering | from CHF 4’900 |
| Retest | from CHF 1’900 |
All prices in CHF excluding VAT. The fixed price depends on the scope and the number of systems.
What you can hold us to
We test only what you have approved in writing.
What we need from you
With scope, goals and ground rules.
By an authorised person.
For queries and for stopping the test in an emergency.
Backups and recovery before tests that can affect systems.
Suited to your ongoing operations.
For cloud and third-party systems, where required.
Frequent questions
A vulnerability scan checks automatically for known vulnerabilities. In Penetration Testing, specialists link these vulnerabilities together, check whether they can actually be exploited and assess the impact on operations and data.
Depending on the test type and scope, 3 to 10 working days. A phishing simulation runs for 2 to 4 weeks. You receive the report within 5 working days of the end of the test.
We test within the agreed time window and coordinate it with your operations. Before tests that can affect systems, backups and recovery must be in place. A contact person can stop the test at any time.
The retest specifically checks the resolved findings. The result is: Finding resolved, partially resolved or open. We agree the timing with you, and the retest costs from CHF 1’900.
You receive a quote with a fixed price. Guide prices: External network test from CHF 6’900, web application from CHF 8’900, cloud configuration from CHF 7’900, internal network test from CHF 12’900, social engineering from CHF 4’900. All prices exclude VAT.
IT security consulting sets the framework. Penetration Testing checks the implementation technically and delivers findings and a retest.
Penetration Testing
In the first conversation we clarify the goal and scope. You then receive a quote with a fixed price.
From CHF 6’900, fixed price, excluding VAT
