Choosing the right assessment
Three levels of testing. Different objectives.
The right choice is driven by the decision you need to make: understand exposure, validate a specific risk, or measure the ability to detect and manage a simulated attack.
Vulnerability Assessment
Identifies known vulnerabilities and weak configurations across an agreed scope.
- Answers
- Where are we exposed and what should we address first?
- Coverage
- Broad and discovery-oriented.
- Output
- Contextualised findings and remediation priorities.
- Best suited for
- Periodic reviews, new assets or infrastructure changes.
Penetration Test
Tests whether a weakness can be exploited safely and what impact it may have.
- Answers
- What can actually be exploited within the authorised scope?
- Coverage
- Targeted systems, applications or services.
- Output
- Evidence, impact, remediation and retest when included.
- Best suited for
- Before release or after significant changes.
Red Team
Simulates a realistic scenario across people, processes and technology.
- Answers
- How effectively can we prevent, detect and respond?
- Coverage
- Objective-led and governed by rules of engagement.
- Output
- Attack path, evidence and improvement opportunities.
- Best suited for
- Validating an established defence capability.
Scope, authorisations, testing windows, contacts, deliverables and the final review are agreed before work begins. Activities are carried out by HyperGrid’s internal team.
The most suitable activity is defined after an initial discussion of assets, objectives and operational constraints.