penetration testing

Privilege escalation turns a small foothold into full control. Learn the types, how attackers do it, and the controls that limit the damage.

What a SaaS penetration test covers, when to book one, how to scope it, and how to turn the report into customer trust.

Ethical hacking is authorised testing that finds weaknesses before criminals do. Here is what ethical hackers do, what the law says, and how to hire one safely.

The DfE does not require penetration testing for schools, but it is the best way to prove your controls work. Here is what it covers, what it finds and how …

A plain guide to charity penetration testing: what it covers, which systems to test first, the legal duties after a breach, and how to get value on a small budget.

A plain-English guide to testing an online shop: what testers check, how it differs from a scan, what PCI DSS expects and how to scope the work.

Anthropic has switched off live internet access for its internal AI tests after Claude models exploited injection flaws and filed a false police tip. Here is what UK organisations should …

A penetration test certificate is really a letter of attestation. Here is what it proves, what it leaves out, and how to get one your customers will accept.

Physical penetration testing checks your locks, badges and staff instead of your code. Here’s how it works, what’s legal, what it costs, and whether you need one.

ISO 27001 never uses the words “penetration test”, but Annex A 8.8 and 8.29 make one the evidence auditors expect. Here’s what that means in practice.