VAPT and Penetration Testing for Businesses in Germany
A VAPT, short for vulnerability assessment and penetration testing, is a controlled attempt to break into your website, app or network. The idea is that someone on your side finds the weak spots before someone else does.
We do this remotely from Chittorgarh, India, for businesses in Germany and elsewhere. We have no German office, and our reports are in English.
Our main page for this service: Web Application Testing.
What gets tested
What we look at depends on what you run:
- Websites and web applications, using the OWASP Top 10 as our checklist
- APIs that your app or partners connect to
- Cloud setup and network design
- Logins, permissions and how data is stored
German customers, the GDPR and standards
German customers sometimes ask suppliers for a recent penetration test. Some work from guidance by the BSI, and some ask about ISO 27001. A penetration test is one piece of that picture. It is not an ISO 27001 audit, and it does not make you compliant.
Under the GDPR, protecting personal data is your duty. A test shows weak spots, and you decide what to fix. We do not give legal advice. Send us what your customer asks for and we check it before you commit.
Personal data during a test
If a system holds real personal data, tell us before testing starts. We agree what we may open and keep the evidence we collect to the minimum. Where a test copy of the system with made-up data exists, we prefer to use that.
What a test cannot do
No test proves that a system is secure. It shows what we could and could not get into on the day, with the tools and time we had. That is why we test again after fixes, and why security is not a one-off job.
Frequently asked questions
Do you have an office in Germany?
No. Our registered office is in Chittorgarh, Rajasthan, India, and we would work with you remotely, over video calls, screen sharing and chat. We have no staff in Germany. We would rather say that now than have you find out later.
Is the report in German?
No. Reports are in English. If your customer requires German, tell us before you commit and we will say plainly whether that can be arranged.
Will testing disturb my live website?
We agree the scope and the timing with you before anything starts, so you know what will be tested and when.
Does a penetration test make us GDPR or ISO 27001 compliant?
No. It shows technical weak spots. Compliance covers your processes, documents and decisions as well, and your adviser or auditor decides what is needed.
How much does a VAPT cost?
It depends on how many applications, APIs and servers are in scope. We quote after a short call about what you run.
Not sure what needs testing?
Tell us what you run and who uses it, and we will suggest a sensible scope. Call +91-86194 70448 or email contact@gtsltd.in. Germany is 3.5 hours behind India in summer and 4.5 hours behind in winter, so most of your working day overlaps with ours.