The information system components of the institution, organization or company within the scope accessible from the internet; security testing service that includes the detection of vulnerabilities, testing and analyzing them with manual methods, reporting the findings / solution proposals and verifying them when requested within the scope of the service..
The information systems of the institution, organization or company where this test service is offered that can be accessed over the internet; -Determination of security vulnerabilities, -Testing the exploitation of detected vulnerabilities using manual methods, -Determining the criticality status by analyzing the findings of the vulnerabilities, -Reporting the results including the necessary explanations and solution suggestions for each detected finding, -In cases where a verification check is also requested within the scope of the service; The measures taken by the institution within the scope of the findings are confirmed and reported again on the basis of the findings. -This service can be performed in the form of black, gray and white box tests upon the request of the institution / organization where the service is provided. -Only when Internet security testing service is provided, web applications are also tested in this context. However, if web application security testing service is to be provided - Tests of applications serving on the Internet are not within the scope of web application security tests
-Internet security tests are carried out remotely from the EvaICT office. During the execution phase of these tests, there is no need to go to the facilities of the institution / organization where the service is provided.
