Penetration Testing Services for Businesses in the United States
A VAPT, short for vulnerability assessment and penetration testing, is a controlled attempt to break into your website, app or network. The idea is that someone on your side finds the weak spots before someone else does.
We do this remotely from Chittorgarh, India, for businesses in the US and elsewhere. We have no US office. You get a report you can read without a security background.
Our main page for this service: Web Application Testing.
What gets tested
What we look at depends on what you run:
- Websites and web applications, using the OWASP Top 10 as our checklist
- APIs that your app or partners connect to
- Cloud setup and network design
- Logins, permissions and how data is stored
When a customer asks for a pen test report
US enterprise customers and partners often ask suppliers for a recent penetration test. We write the report so a business reader can follow it, and we can prepare a short summary for sharing.
Whether it satisfies a particular customer, insurer or auditor depends on what they ask for. Send us the requirement and we check it before you commit. We say plainly if it does not fit.
Agreeing the rules first
Before anything starts we agree the scope, the dates and a contact person in writing. Cloud providers such as AWS, Azure and Google Cloud publish their own rules for security testing, and we check our plan against them.
We test only systems that you own or have written permission to test.
What a test cannot do
No test proves that a system is secure. It shows what we could and could not get into on the day, with the tools and time we had. That is why we test again after fixes, and why security is not a one-off job.
Frequently asked questions
Do you have an office in the US?
No. Our registered office is in Chittorgarh, Rajasthan, India, and we would work with you remotely, over video calls, screen sharing and chat. We have no staff in the US. We would rather say that now than have you find out later.
Will testing disturb my live website?
We agree the scope and the timing with you before anything starts, so you know what will be tested and when.
Will your report satisfy our customer or auditor?
It depends on what they require. Send us the requirement and we will check it against what we deliver before you commit. We will not claim it fits if it does not.
Can you help us fix what you find?
The report gives your developer a line-by-line list of what to change, and we retest after the fixes. If you want help beyond that, talk to us.
How much does a VAPT cost?
It depends on how many applications, APIs and servers are in scope. We quote after a short call about what you run.
Not sure what needs testing?
Tell us what you run and who uses it, and we will suggest a sensible scope. Call +91-86194 70448 or email contact@gtsltd.in. The main US time zones run from about 9.5 to 13.5 hours behind India, so calls usually fall in your morning and our evening.