VAPT and Penetration Testing for Businesses in the Philippines
A VAPT, short for vulnerability assessment and penetration testing, is a controlled attempt to break into your website, app or network. The idea is that someone on your side finds the weak spots before someone else does.
We do this remotely from Chittorgarh, India, for businesses in the Philippines and elsewhere. We have no Philippine office. You get a report you can read without a security background.
Our main page for this service: Web Application Testing.
What gets tested
What we look at depends on what you run:
- Websites and web applications, using the OWASP Top 10 as our checklist
- APIs that your app or partners connect to
- Cloud setup and network design
- Logins, permissions and how data is stored
Overseas customers and the Data Privacy Act
Philippine companies that serve overseas customers, including outsourcing and software firms, are often sent security questionnaires and asked for a recent penetration test. The Data Privacy Act of 2012 also expects personal data to be protected, and the National Privacy Commission publishes guidance.
A test is one piece of that picture. Send us what your customer or adviser asks for, and we check it before you commit. We do not give legal advice.
What you get back
A risk report that a business owner can follow, and a technical list for your developer showing what to fix, line by line. After you have made the fixes we test again to check they worked. Reports are in English.
What a test cannot do
No test proves that a system is secure. It shows what we could and could not get into on the day, with the tools and time we had. That is why we test again after fixes, and why security is not a one-off job.
Frequently asked questions
Do you have an office in the Philippines?
No. Our registered office is in Chittorgarh, Rajasthan, India, and we would work with you remotely, over video calls, screen sharing and chat. We have no staff in the Philippines. We would rather say that now than have you find out later.
Will testing disturb my live website?
We agree the scope and the timing with you before anything starts, so you know what will be tested and when.
Will your report satisfy our overseas customer?
It depends on what they require. Send us the requirement and we will check it against what we deliver before you commit. We will not claim it fits if it does not.
Can you help us fix what you find?
The report gives your developer a line-by-line list of what to change, and we retest after the fixes. If you want help beyond that, talk to us.
How much does a VAPT cost?
It depends on how many applications, APIs and servers are in scope. We quote after a short call about what you run.
Not sure what needs testing?
Tell us what you run and who uses it, and we will suggest a sensible scope. Call +91-86194 70448 or email contact@gtsltd.in. The Philippines is 2.5 hours ahead of India all year, so a call at 2 pm in Manila is 11:30 am for us.