JAG Cybersecurity Pentesting / Ethical Hacking

Pentesting and ethical hacking service offered by JAG Cybersecurity, aimed at identifying vulnerabilities in an organization's infrastructure, applications, systems, and personnel from an attacker's perspective. The service covers websites, APIs, perimeter applications, IoT, and industrial systems (SCADA, ICS, IoT). Testing follows the OSSTMM (Open Source Security Testing Methodology Manual) framework and is conducted by certified professionals to avoid causing damage or denial of service to client systems. Engagements are performed under three testing modalities: - Black Box: simulates an external attack with no prior information about the organization, aiming to identify vulnerabilities exploitable from outside the network. - Grey Box: testing performed with partial internal information (e.g., credentials), evaluating the system from both outside and inside to determine how far an attacker could progress after exploiting a vulnerability. - White Box: a comprehensive review including network infrastructure, application source code, servers, and existing security controls (e.g., firewalls), with the ability to integrate into Agile or Waterfall development processes and perform static and/or dynamic code reviews. The service is referenced in the context of Chile's Law N° 21.459, which regulates ethical hacking and exempts authorized security researchers from criminal liability when accessing systems with the owner's express authorization for vulnerability research or security improvement purposes.