Solved

PCI Compliance Network Scan Penetration Test

Posted on 2014-10-14
6
180 Views
Last Modified: 2015-01-11
Working with Dentist, Chiropractors, CPA's and Other Financial planners...Some as Low as 3 Desktops and 1 Server --> 39 Desktops and 2 Servers.

I am in need of a Penetration Test that Won't Break the Bank..

Been calling all day and they range from $5,000 and up.

Cjoego
0
Comment
Question by:Joseph Salazar
6 Comments
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 40381530
Have you looked at the approved list of PCI scanning companies?  https://www.pcisecuritystandards.org/approved_companies_providers/approved_scanning_vendors.php
0
 
LVL 54

Expert Comment

by:McKnife
ID: 40381575
Those guys doing pen tests are usually highly trained security experts. It is normal that those charge you at the very least 1000USD per person per day. What figures did you expect, if I may ask?
0
 

Author Comment

by:Joseph Salazar
ID: 40391289
will be checking out the list this week,

I have Small clients between 5-25 PC's and I am wishing to start a Security marketing Campaign and Needed a Cheap either Scanning company or Scanner it'self. to check a Network before and after my Install

Cjoego
0
Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

 
LVL 1

Accepted Solution

by:
Ahmed Amin Ahmed earned 500 total points
ID: 40519126
instead of going to penetration testing which is actually very expensive. You may go for Vulnerability Assessment/Security Assessment. Using automated tools available in the Market.

e.g..
1- Nessus - http://www.tenable.com/products/nessus
2- GFI LanGuard- http://www.gfi.com/products-and-solutions/network-security-solutions/gfi-languard
3- Nexpose - http://www.rapid7.com/products/nexpose/

or You may go to freelancer's websites, and hire a cheap penetration tester.
www.freelancer.com, or Elance.com

Ahmed Amin
0
 
LVL 54

Expert Comment

by:McKnife
ID: 40520812
Having a third party evaluate your security is not the same as doing it yourself - no matter what tools you use, no matter if you are good or not. You should have someone else do it.

cjoego, any feedback? This question is growing old.
0
 

Author Closing Comment

by:Joseph Salazar
ID: 40543408
Thank you for all of your responses.

We signed up with Rapid7 and it does a Fantastic Job.

Cjoego
0

Featured Post

Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ransomware continues to grow in reach and sophistication, putting data everywhere at risk. Learn how to avoid being caught in its sinister clutches with these 11 key tips.
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question