Conducting Penetration Tests

In this article, you will find:

• Navigation guidance for accessing the Penetration Testing area.

• A step-by-step process of conducting a new penetration test.

Accessing the Penetration Testing feature

Within the Penetration Testing area of the OneClickComply platform you can test the security of various endpoints within your organisations, such as websites, devices, databases etc. It can be accessed by selecting the Penetration Testing option from within Scanning > Vulnerability Management, as shown below:

Penetration testing navigation guidance

Starting New Penetration Tests

Penetration Tests on the OneClickComply platform allow you to check your websites and applications for potential vulnerabilities. Once you have navigated to the Penetration Testing area of the platform, you will see a page similar to the following:

Example penetration test

You can start a new test by selecting the 'New' button on the top right of the page, as shown in the example above. This will bring open a small window where you will need to enter your name, email address, company name, and a short message explaining why you would like access to the Penetration Testing feature.

The available Scan Types are as follows:

• Wordpress

• Website

• Network Scanner

• Joomla

• Drupal

• Application

• API

Once you have selected your desired scan type, you will then be prompted to add additional information. In this example, we will be scanning a website, so we will be prompted to add the website URL.

When this has been completed, click Submit. The test will then take place and begin scanning for vulnerabilities.