A guide to CREST penetration testing

CREST accreditation is a good place to start – a ‘stamp of approval’ for a high-quality penetration test. But what does it mean to be CREST-approved, and what differentiates CREST penetration testing from other assessments? Read on to find out.

What is penetration testing?

Penetration testing (also referred to as pen testing) is a type of ethical hacking engagement designed to identify and address security vulnerabilities in networks, systems and applications. The scope and scale of a test will vary depending on the buyer’s requirements, but not all penetration testing companies work to the same standards, and there can be an inherent risk in allowing a provider to access important assets and data.

A CREST penetration test is an assessment conducted by a CREST-registered penetration tester. CREST certification demonstrates that a pen testing company conducts and documents penetration testing in accordance with the highest legal, ethical and technical standards.