A New Service from the CSIRT.CZ Team Will Help Increase the Security of Your Network

The aim of these penetration tests is to identify access to key elements of the network, verify the possibility of owning them, and propose effective measures.

Starting this week, the National CSIRT of the Czech Republic operated by CZ.NIC, the administrator of the Czech national domain, offers a new service for locating vulnerabilities in the IT infrastructure: penetration testing. The aim of these tests is to identify access to key elements of the network, verify the possibility of owning them, and propose effective measures. Each penetration test is carried out for a fee on the basis of a specific order. After the testing, each client will receive a summary report of detected vulnerabilities along with recommendations for addressing them. Complete information on penetration testing by the CSIRT.CZ team is available on the service’s webpage (Czech only).

Half-forgotten and outdated services without support, vulnerable web-based and other applications, bad configuration, or consequences of irresponsible behavior of ordinary users. That’s just a handful of reasons that can be behind a successful cyber-attack. Penetration testing, during which testers try to control the network in question, can help detect these and similar deficiencies in the IT infrastructure. This is an individual, often comprehensive, security audit that provides real information about the security status of a particular network. From surveying the target, careful testing, exploiting detected bugs and vulnerabilities, testers proceed to gaining control over user and administrator accounts. The outcome is a detailed report describing the individual steps with the detected vulnerabilities evaluated according to their severity, as well as appropriate measures to resolve the problem.

“In CZ.NIC has been long focused on systematic increase of cybersecurity in the Czech Republic, including timely protection of systems. It makes me very happy that thanks to colleagues from CSIRT.CZ we can expand our range of preventive tools, which include, for example, our safe network devices Turris. Penetration testing can be a boon to organizations of any type and an invaluable investment for the future, because an undetected vulnerability can mean large losses, not only financial, but also ethical, if personal data from databases is misused and the credibility of the organization compromised,” said Ondřej Filip, the CZ.NIC CEO, on the occasion of the presentation of the new service.

Each testing takes place on the basis of a specific order, which is charged according to set criteria. These include the organization type, network size, or the testing duration and scope. The exception is the public sector, non-profit organizations and members of the CZ.NIC Association that will be granted a discount on this service.

You can find more information or order the penetration testing service at https://csirt.cz/cs/penetracni-testovani/ (Czech only).