Free Pentest Report

Curious how far along you are on information security? With a pentest we simulate an actual cyberattack. During a QuickScan we look for the low-hanging fruit and offer a no-obligation hour estimate for a possible pentest engagement. What is a pentest and what are your benefits from a QuickScan? Read more below!

What do you get from Tozetta?

Curious how far along you are on information security? With a pentest we simulate an actual cyberattack. During a QuickScan we look for the low-hanging fruit and offer a no-obligation hour estimate for a possible pentest engagement.

  • Free hours an ethical hacker spends on your question
  • Tips for improving your cybersecurity
  • A sharp proposal for a pentest at your company
  • Full report including points of attention

Request a free QuickScan now

Receive a free report including a no-obligation hour estimate for a pentest engagement!

Request QuickScan

Pentest QuickScan

During a free QuickScan, an OSCP-certified hacker takes a free look at your network, web or mobile application. We take a first look before an actual engagement/pentest is carried out. The only condition we have is that the report is delivered after an online meeting of roughly 30 minutes. The goal is to get acquainted online and give advice on running a pentest.

Run a pentest after a QuickScan?

During a QuickScan conversation, the ethical hacker tells you what he found after a quick check (roughly 30 minutes). The points for improvement are explained, so you know which parts pose a cyber risk for your organization's cybersecurity.

The online conversation can always give rise to a potential pentest engagement, but we want to emphasize that you're not committed to anything! You'll receive the Pentest QuickScan report digitally after the online explanation, free of charge. You can then decide for yourself whether you want to run a pentest.

Why pentest?

60%

of companies that get hacked go bankrupt within 6 months

€50K

is the average damage caused by a hack

50+

vulnerabilities are reported every day

Cybercrime keeps growing more common. The numbers above unfortunately don't lie. With a pentest you reduce the chance of becoming a victim of cybercriminals. That's why we're happy to advise and support you on cybersecurity. With a Pentest QuickScan Tozetta gives advice on running a pentest! We do this entirely without obligation and without any expectations on your part. What can the QuickScan mean for you?

  • It tests and assesses the basics of your software & systems
  • It reveals some surface-level vulnerabilities
  • A real ethical hacker takes a free 30-minute look
  • A QuickScan reduces the chance of a hack

Why pentest with Tozetta?

At Tozetta we care about one thing above all: improving your cybersecurity. We try to contribute to this with various cybersecurity solutions, including running pentests. Beforehand, we never assume a pentest is the right solution for your company. We're happy to have the conversation to understand your needs and find a solution that fits your security question.

Experience shows there can be countless reasons to choose Tozetta, or not. We aim to give you the right information so you can make a well-considered decision for the right party. If that leaves you with better online resilience, our goal is achieved.

Learn more about Tozetta →

Pentest questions

Who runs a pentest?

At Tozetta you always deal with Ian van der Wurff. As an OSCP-certified pentester he's Lead Pentest at Tozetta and is ultimately responsible for every pentest. Ian is an "ethical hacker", meaning he uses his knowledge to improve organizations' cybersecurity.

Unlike a real hacker, Ian handles your systems and information with confidentiality. Think of it as a cybersecurity test that your corporate network, systems or software must pass. A pentest gives you more certainty about your organization's current cybersecurity!

Which pentest methods are there?

For convenience, the world of pentesting has three pentest methods. These are white box, grey box and black box pentesting. With the last one, black box pentesting, the ethical hacker gets no information beforehand. This makes the pentest an actual simulation of a real attack. With whitebox pentesting, the ethical hacker has full insight into the client's situation. Think of the source code. A whitebox pentest is therefore more thorough, while a blackbox pentest is more of a simulation of an actual external attack.

Want to know more? Read our blog on what is pentesting!

What is pentesting?

A pentest is a technical security measurement in which an ethical hacker tests a system for technical security risks, also known as vulnerabilities. These tests are carried out by a pentest company with the goal of mapping the potential dangers to your organization. During a pentest, all vulnerabilities are delivered in a pentest report.

How does pentesting work?

Running a pentest is a creative and manual process that an ethical hacker goes through. The ethical hackers of Tozettasearch within the scope for errors, also known as "vulnerabilities". This is of course with your permission. The vulnerabilities are made visible through an extensive report. The goal is to improve your cybersecurity.

Run a pentest?

A pentest QuickScan is a first look at the cybersecurity of your software and systems. If you're looking for a comprehensive pentest, Tozetta's Pentest page offers more information. There we explain what a full pentest process looks like and everything involved in running a pentest!

Run a pentest

Pentest report

A pentest report can range from a few pages to half a book. This depends not just on the vulnerabilities found, but also on the "improvement plan". Some reports lack an improvement plan and only show the vulnerabilities. At Tozetta you'll always find an improvement plan, so you can resolve the vulnerabilities easily. This is how we hope to contribute to improving your cybersecurity.

Hour estimate for a pentest

Finally, let's talk about the hour estimate for a pentest. There can be differences between various quotes and hour estimates. In principle a pentest can take as long as you want. A corporate network and all its subdomains are often very complex. If everything needs to be checked in detail, a hacker can be busy for a long time. Still, you always have to weigh things up. How much budget and time is available for an ethical hacker? Often the pentest provider can help with this. An ethical hacker can run a pentest QuickScan. This gives you a no-obligation hour estimate plus explanation of the estimated hours.

“Thanks to our partnership with Tozetta, we're able to further expand our expertise in digital investigation, cybersecurity and training.”

Paul de Vlieger, Director of Digital Investigation

What does a pentest cost?

Prices for running a pentest can vary greatly. The reasons for this can be down to various factors. We'll walk you through these factors and explain what to look out for in a pentest quote.

Penetration test costs can differ substantially. This is because the level between ethical hackers can vary a lot. A highly trained ethical hacker (OSCP and above) often charges more for their services than ethical hackers with lower qualifications. Experience naturally also plays an important role!

Sometimes companies only use automated scans during a pentest. These kinds of security scans often miss part of the vulnerabilities that an ethical hacker would uncover. Because the scans are run by a system, this can save on pentest costs. But is this what you want as an organization? There are also other ways to continuously test your cybersecurity for vulnerabilities, take a look at our page: Pentest As A Service.

Request a free pentest QuickScan

At Tozetta you can request a Pentest QuickScan without obligation. The hour estimate for your question is included. On top of that, the pentest costs are shared with you free of charge. Interested in running a pentest?

Frequently asked pentesting questions

How long does a pentest take?
This varies enormously per pentest. A pentesting engagement often starts with a day of testing and a day of reporting. The duration can grow substantially depending on the scope. Think of the size of the network and/or multiple mobile or web applications that need to be tested. We always give a no-obligation estimate after a free QuickScan.
Which pentest method fits my organization?
Earlier you read that whitebox, greybox and blackbox pentesting are the options. We advise running a whitebox pentest. Why? An ethical hacker can extensively test your online resilience for vulnerabilities with the necessary access rights. A blackbox pentest can, however, give good insight into whether a "real" (ethical) hacker can break into your systems.
How do I prioritize the vulnerabilities found?
You don't, we do that for you! We score the vulnerabilities found as high, medium or low risk. In the pentest report we advise what should be fixed first.
How do I convince my colleagues to run a pentest?
Unfortunately this question comes up a lot. Many IT professionals know how important a pentest can be for the organization. Yet many companies haven't freed up budget for it, or find it hard to convince "non-technical" colleagues. At Tozetta we offer OSINT and Cyber Security Awareness trainings, among others. In these trainings we help convey the importance of cybersecurity and the financial consequences of cybercrime. If you as an IT professional find it hard to convey this, we're happy to talk to the colleagues involved directly. Think of it as a free Cyber Security Awareness training!
How much does a pentest cost?
Hiring an ethical hacker to run a pentest typically costs between €125 and €200 per hour (Google). The ethical hacker then actively and manually searches for vulnerabilities (not an automatic scan or check for common vulnerabilities). It's hard to estimate what a pentest costs in general. It often starts at two days (one day testing, one day reporting). At Tozetta we're always happy to have the conversation. Based on your needs a no-obligation quote can be put together.
Tozetta Quickscan
Tozetta Kantoor foto - wat is een pentest
Kevin & Ian Over Ons
pentest rapport Tozetta Cyber Security - wat is een pentest?
pentest rapport Tozetta Cyber Security - wat is een pentest?