Articles - OnSecurity

Top 10 Web App Vulnerabilities Found in Penetration Tests

Across real-world penetration testing engagements, the same handful of web app vulnerabilities surface time and again, regardless of industry, application size, or development team maturity. These aren’t obscure or highly […]

How Can Penetration Testing Support Zero Trust Security?

Zero trust security is built on one principle: never trust and always verify. Every user, device, and connection is treated as a potential threat until it proves otherwise, whether it’s […]

Understanding White Box Penetration Testing Techniques

White box penetration testing gives security teams the deepest possible view of an application’s weaknesses, providing testers with full visibility of source code, architecture, and credentials before a single test […]

How Often Do You Need to Pentest for ISO 27001 Compliance?

Organisations pursuing or maintaining ISO 27001 certification are often surprised to learn that the standard sets no fixed penetration testing schedule. In fact, there is no clause stating whether ISO […]

Website Penetration Testing Checklist: What Should A Good Test Cover?

Key Takeaways Introduction A website penetration test is only as good as its scope. Too many organisations assume that any web app pentest is a thorough one, only to discover […]

What Is CTEM (Continuous Threat Exposure Management)? A Practical Guide

Continuous Threat Exposure Management (CTEM) replaces periodic security assessments with ongoing validation. Learn how CTEM’s five stages work, who’s responsible for each, and how penetration testing supports the programme.

What is Network Penetration Testing?

Cyber threats are evolving, and every business – large or small – faces potential risks. A single vulnerability in your network infrastructure can lead to data breaches, financial losses and reputational damage. Network penetration testing is a proactive approach to uncover and address these vulnerabilities.