VAPT and Penetration Testing for Businesses in Australia
A VAPT, short for vulnerability assessment and penetration testing, is a controlled attempt to break into your website, app or network. The idea is that someone on your side finds the weak spots before someone else does.
We do this remotely from Chittorgarh, India, for businesses in Australia and elsewhere. We have no Australian office. You get a report you can read without a security background.
Our main page for this service: Web Application Testing.
What gets tested
What we look at depends on what you run:
- Websites and web applications, using the OWASP Top 10 as our checklist
- APIs that your app or partners connect to
- Cloud setup and network design
- Logins, permissions and how data is stored
Rules and customers in Australia
Under the Notifiable Data Breaches scheme, many Australian organisations must report certain data breaches. Government and finance customers can also ask suppliers to meet security frameworks of their own, such as the Essential Eight.
A penetration test is not the same thing as an assessment against such a framework, and we say so. Send us what your customer or regulator asks for, and we check it before you commit.
What you get back, and how we test remotely
A risk report that a business owner can follow, and a technical list for your developer showing what to fix, line by line. After you have made the fixes we test again to check they worked.
We agree the scope and the timing with you in writing before anything starts, so your hosting provider and your security team are not surprised.
What a test cannot do
No test proves that a system is secure. It shows what we could and could not get into on the day, with the tools and time we had. That is why we test again after fixes, and why security is not a one-off job.
Frequently asked questions
Do you have an office in Australia?
No. Our registered office is in Chittorgarh, Rajasthan, India, and we would work with you remotely, over video calls, screen sharing and chat. We have no staff in Australia. We would rather say that now than have you find out later.
Will testing disturb my live website?
We agree the scope and the timing with you before anything starts, so you know what will be tested and when.
Will a penetration test cover the Essential Eight?
No. The Essential Eight is a set of security controls, assessed against maturity levels. A penetration test looks for weaknesses in specific applications and networks. It can feed into that work, but it is not the same thing.
Can you help us fix what you find?
The report gives your developer a line-by-line list of what to change, and we retest after the fixes. If you want help beyond that, talk to us.
How much does a VAPT cost?
It depends on how many applications, APIs and servers are in scope. We quote after a short call about what you run.
Not sure what needs testing?
Tell us what you run and who uses it, and we will suggest a sensible scope. Call +91-86194 70448 or email contact@gtsltd.in. Sydney and Melbourne are 4.5 hours ahead of India, or 5.5 hours during daylight saving, so your afternoon is our morning.