Penacity offers penetration testing services covering a range of assessment types for organizations in both the public and private sectors. The service is designed to evaluate an organization's security posture against threats ranging from opportunistic attacks to advanced persistent threats (APTs). Service offerings include: - **Web Application Testing:** Assessment of in-house or vendor-developed web applications to identify vulnerabilities, with a remediation plan provided. - **Internal Penetration Testing:** Comprehensive vulnerability analysis using structured testing methodologies to identify and address systemic internal security issues. - **External Penetration Testing:** Assessment of externally facing assets and infrastructure. - **Wireless Testing:** Identification of weaknesses and vulnerabilities in wireless networks. - **Social Engineering Campaigns:** Evaluation of end-user susceptibility to social engineering, including business intelligence metrics and end-user awareness training. - **OT Security Testing:** Penetration testing against Operational Technology (OT) environments, including Industrial Control Systems (ICS) and SCADA systems. Engagements are billed on an hourly basis. Consultants have backgrounds in DoD CyberWarfare defense and private sector security. The service also includes enforcement of company security policy as part of its scope.