Question 1

What is a penetration test?

Accepted Answer

A penetration test (pentest) is an authorized, controlled security assessment in which certified IT security experts simulate the behavior of real-world attackers. The goal is to identify and verify vulnerabilities in IT systems, networks, and applications - before cybercriminals can exploit them. Unlike automated vulnerability scans, manual pentests deliver validated results with zero false positives, realistic attack paths, and prioritized remediation guidance.

Question 2

What is the AWARE7 Pentest Box?

Accepted Answer

The AWARE7 Pentest Box is a physical device that we connect to your network on-site one time. After that, our experts conduct the internal penetration test entirely remotely. The device communicates back to us exclusively over encrypted mobile data - no VPN access or firewall changes required on your side. The result is the same depth of internal analysis as a traditional on-site engagement, but without travel and accommodation costs.

Question 3

How does a pentest differ from a vulnerability scan?

Accepted Answer

A vulnerability scan is an automated tool that lists known weaknesses - often with 30-70% false positives. A penetration test goes significantly further: our experts manually verify every finding, chain vulnerabilities into attack paths, test for business logic flaws, and discover issues no scanner can detect. You receive verified, reproducible findings with concrete remediation recommendations.

Question 4

How long does a penetration test take?

Accepted Answer

Duration depends on scope and complexity. A web application test typically takes 5-10 business days; a comprehensive infrastructure test 10-20 business days. We clarify the exact timeline in a free initial consultation and you receive a fixed-price quote within 24 hours.

Question 5

Can our systems be damaged during the test?

Accepted Answer

No. We follow recognized standards (OWASP, PTES, OSSTMM) and coordinate all tests in advance. Destructive tests such as DoS are only conducted in isolated test environments. Before testing in production environments, a current backup is created. Our testers hold ISO 27001 Lead Auditor certifications and adhere to contractually defined Rules of Engagement.

Question 6

What types of pentests do you offer?

Accepted Answer

We cover all areas: web applications (OWASP Top 10, API Security), network infrastructure (internal/external, Active Directory), mobile apps (iOS/Android), cloud environments (AWS, Azure, GCP), and IoT/OT systems. Both black-box (no prior knowledge), grey-box (with credentials), and white-box (with source code) testing.

Question 7

Is a pentest required for NIS-2 compliance?

Accepted Answer

Yes. The NIS-2 Directive requires "essential" and "important" entities to implement technical security measures to prevent disruptions to availability, integrity, and confidentiality. Penetration tests are explicitly listed as a required security measure. The DORA regulation has also required "threat-led penetration testing" for financial entities since January 17, 2025 (Articles 26 and 27 DORA). Our reports are designed to serve as compliance evidence for auditors and regulators.

Question 8

What does a penetration test cost?

Accepted Answer

Costs depend on scope and complexity. A focused web application test starts at approx. EUR 5,000, a comprehensive infrastructure test at approx. EUR 8,000. You receive a binding fixed-price quote within 24 hours - no hourly rates, no hidden costs, no surprises.

Question 9

How often should a pentest be conducted?

Accepted Answer

At minimum annually, more frequently for critical systems or after major changes (new releases, infrastructure overhauls, M&A activity). NIS-2-affected organizations should test quarterly. Many of our clients use our retainer model for regular, plannable tests at reduced rates.

Question 10

What does the pentest report look like?

Accepted Answer

Our report includes: Management Summary for executives (1-2 pages), detailed technical findings with CVSS score, screenshots, reproducible proof-of-concepts and concrete remediation recommendations, a risk matrix, and a prioritized roadmap. A sample report is available on request.

Question 11

Is a penetration test legal?

Accepted Answer

Yes - when conducted professionally. Penetration tests are legally authorized as technical and organizational security measures under GDPR Article 32, NIS-2, and other applicable regulations. Decisive is the contractual framework: before testing begins, we document consent, authorization declarations, and the exact scope in writing. This ensures no criminal liability arises and that our testers act with full authorization.

Question 12

Do you work with freelancers or subcontractors?

Accepted Answer

No, as a matter of principle. All pentesters are full-time employees of AWARE7 and are bound by strict confidentiality agreements. No freelancer, no subcontractor has access to your systems or results. Using consistent in-house teams throughout the engagement also reduces legal risk. All data is processed in Germany - on our own infrastructure, not in the cloud.

Question 13

What is the difference between black-box, grey-box, and white-box pentest?

Accepted Answer

In a black-box pentest, we simulate an external attacker with no prior knowledge - we receive only the scope (e.g., a domain or IP range). In a grey-box test, we work with limited prior knowledge, such as credentials or architecture documentation. The white-box pentest (also known as code review) is the most comprehensive: we receive full source code access and architecture details. The choice depends on your protection requirements - for maximum coverage, we recommend grey-box as the standard.

Question 14

What is the difference between a penetration test and a vulnerability assessment?

Accepted Answer

A vulnerability assessment uses automated scanners to list known weaknesses - often with 30-70% false positives. A penetration test goes significantly further: our OSCP-certified experts manually verify every vulnerability, chain them into realistic attack paths, and assess the actual business risk. The result: zero false positives, reproducible proof-of-concepts, and concrete remediation guidance with CVSS ratings.

Question 15

What distinguishes a penetration test from red teaming?

Accepted Answer

A penetration test has a defined scope (e.g., a web app or network segment) with the goal of finding as many vulnerabilities as possible. Red teaming simulates a real attacker across all vectors - technical, phishing, social engineering, physical access - with the objective of achieving a specific goal (e.g., domain admin or access to customer data). Red teaming primarily tests your detection and response capabilities (blue team), while a pentest maps your technical attack surface.

Question 16

What standards and methodologies does AWARE7 use?

Accepted Answer

We follow the BSI Penetration Testing Guidelines, the OWASP Testing Guide (for web applications and APIs), PTES (Penetration Testing Execution Standard), and the MITRE ATT&CK Framework (for red teaming). Our approach follows a 5-phase model: preparation, reconnaissance, analysis and assessment, active exploitation, and post-engagement reporting. All tests are documented according to recognized information security standards and can be used as compliance evidence.

Your Pentest Provider. 500+ Tests. Every finding verified.

Why your organization is more vulnerable than you think

Penetration Test Process: 5 Phases Following Industry Standards

Client references

Pentest Services: From Web Apps to Cloud

Web Applications

Network & Infrastructure

Mobile Apps

Cloud Security

IoT & OT Security

Red Teaming & Social Engineering

Pentest Methods: Black Box, Grey Box & White Box

Black-Box Pentest

Grey-Box Pentest

White-Box Pentest

What sets us apart from other providers

Research and teaching as our foundation

Digital sovereignty - no compromises

Fixed price within 24h - predictable project timelines

Your dedicated contact

Internal Penetration Test. Remote, not on-site.

No Travel or Accommodation Costs

Encrypted Mobile Connection

Equivalent Analysis Quality

Penetration Testing Cost: Transparent & Predictable

Legally Sound Penetration Testing

Legally Authorized

Contractually Fixed

NIS-2 & DORA Compliant

Certified Penetration Testing Provider from Germany

Pentest Report

Request Sample Report

Frequently Asked Questions About Penetration Testing

Weiterführende Artikel

Red Team vs. Pentest: Wo liegen die Unterschiede?

Schwachstellenscan vs. Pentest: Den richtigen Ansatz wählen

Active Directory Red Team: Kerberoasting, Golden Ticket und DCSync

Every week without a pentest is a week
where attackers hold the advantage.