4Shiva VA-PT is a professional service offering that provides Vulnerability Assessment and Penetration Testing for organizations. The service aims to identify vulnerabilities and test the penetrability of IT systems, networks, and applications. The Vulnerability Assessment component focuses on identifying the largest possible number of vulnerabilities in computer systems or applications. This can be performed from within the company perimeter (internal vulnerability assessment) or from outside (internet-faced vulnerability assessment). The service uses standard methodologies such as OWASP and OSSTMM, and can be conducted in black box mode (without prior knowledge), white box mode (with full access to technical specifications), or gray box mode (with partial information). The Penetration Testing component simulates actual attack scenarios by malicious users, following phases including information gathering, network scanning, and exploitation. The service can incorporate social engineering techniques to demonstrate infrastructure permeability. The service covers three main areas: - Infrastructure VA & PT: vulnerability checks of wired networks, servers, and clients - Application VA & PT: testing of online exposed points, login pages, mobile applications, software, web portals, and CRM systems - Wireless VA & PT: targeting access points The service can be contextualized to adhere to various regulations and standards, facilitating compliance verification by technicians and auditors.