CTG's penetration testing approach encompasses a highly technical, detailed, and real-life simulated test of your security defensive posture, controls, and processes. Our seasoned experts combine years of penetration testing experience with proven methodologies, commercial and open source toolsets, and the specialized skills required to write custom tools and exploits for attack vectors unique to specific environments.  

CTG specialists have in-depth experience in vulnerability assessment in a wide range of environments—from a specific area of an organization's technical environment to more comprehensive assessments encompassing multiple components and tiers within the information technology infrastructure. CTG has performed vulnerability assessments on networks, web applications, servers, databases, VoIP, firewalls, network infrastructure, wireless, and PBX, for hundreds of organizations. Our approach delivers substantiated findings and actionable recommendations for both the technical audience and the boardroom.

CTG experts help you manage compliance with multiple regulatory requirements. Our specialists have extensive experience in evaluating compliance with PCI, STAR networks, HIPAA, GLBA, and other standards.~

Using ISO 27001 as a framework, CTG security experts work with management, risk management groups, and information security management teams to evaluate your security program's alignment with and support of business processes and goals. Our assessment ascertains that your program complies with the necessary legal and regulatory requirements and that it supports the overall risk management program. It also evaluates your security management program components, including policies and procedures, security strategy, the selection of solutions, and the collection and management of metrics.