Test your organization’s employee understanding of information security and identify any vulnerabilities.
A-LIGN’s penetration testers will use the latest in social engineering tactics including phishing, pretexting, baiting and others to uncover security vulnerabilities that exploit the human factor of your organization.
Create a culture of awareness
Social engineering is an attack vector that involves the use of deception to manipulate people into divulging confidential or personal information that may be used for fraudulent purposes.
A-LIGN’s OSCP, OSCE, and OSCP-certified penetration testers will use the latest social engineering tactics, so you have confidence that your organization’s critical data is protected.
The benefits of social engineering services:
- Prevents sensitive information from being compromised
- Teaches employees how to handle social engineering attacks so they are prepared
- Identifies where security policies and procedures are needed
Social engineering services
- Physical entry attacks
- Phishing attacks
- Phone attacks (vishing)
Physical entry attacks
In a physical entry attack, a penetration tester attempts to enter a client building through a concealed identity or by compromising the physical security measures in place. Once access is gained, A-LIGN’s penetration tester attempts to connect to and compromise the information systems.
Phishing attacks
Phishing attacks are conducted through a series of communications, such as emails, that are sent to encourage individuals to provide sensitive information or to inadvertently execute malicious code. This attack will test the employee’s ability to identify malicious communications.
Phone attacks (vishing)
Similar to phishing attacks, phone attacks (vishing) come from attackers calling as a legitimate source to capture sensitive information. These attacks are often used in conjunction with other attacks to gain access to a system.