DegTech provides network penetration testing for Australian businesses, using Kaseya’s vPenTest platform. A penetration test (or pen test) is an authorised, controlled attempt to break into your network, so weaknesses are found and fixed before a real attacker finds them. You get a clear picture of how exposed you are and what to fix first, explained in plain English.
Book a free consultation or call 03 8764 3944 to talk about testing your network.
What our penetration testing covers
We agree the scope with you before any testing starts. Our tests look at your network from two angles:
- External testing of your internet-facing systems, such as your website, email gateway, remote access and any exposed services.
- Internal testing of your office network, to see what an attacker could reach if they got past the front door. Internal tests use a small virtual machine placed on your network.
Testing is automated and on demand, so it can be scheduled around your business and repeated as often as you like. It does not cover web application testing, Microsoft 365 or cloud configuration reviews, social engineering or physical testing. If you need those, we will tell you honestly and point you to a specialist. Testing also fits alongside our managed security services and wider cybersecurity solutions.
How a penetration test works
- We scope the test with you. We agree which addresses and systems are in scope, what is off limits and when testing will happen, and you give written authorisation.
- We set it up. External tests need no equipment. For an internal test, we place a small virtual machine on your network.
- The platform tests. It looks for weaknesses, then tries to use them the way an attacker would, logging every action it takes.
- We report and talk it through. You receive a report of what was found, how serious each issue is and what to fix first, and we walk you through the next steps.
Penetration test or vulnerability scan: what is the difference?
A vulnerability scan is an automated tool that lists known weaknesses. A penetration test goes further: it actively tries to use those weaknesses and move through your network the way an attacker would, to show what could actually be reached. Both are useful, and they do different jobs.
| Vulnerability scan | Penetration test | |
|---|---|---|
| How it works | Checks systems against a list of known weaknesses | Actively tries to exploit weaknesses and move through the network |
| Question it answers | What known weaknesses exist? | What could an attacker actually do? |
| How often | Regularly, such as monthly | Planned, from once a year to quarterly or monthly when testing is automated |
| Best for | Ongoing hygiene | Proving real-world risk and checking that controls work |
Why businesses test
- Find and fix weaknesses before an attacker does.
- Check that your security controls work in practice, not just on paper.
- Answer customer, insurer and auditor questions about security testing.
- Test again after big changes, such as a new system, a cloud move or a new office.
Penetration testing, the Essential Eight and ISO 27001
We align our own security controls to the ACSC Essential Eight, and we are working towards ISO 27001 certification. Testing is a common part of checking progress against standards like these, because it shows whether controls hold up against a real attempt to get in.
What does a penetration test cost?
The price depends on what is tested, including the number of devices and IP addresses in scope and whether you want internal testing, external testing or both. We quote after a short scoping call, so you pay for the testing you need. Our managed IT and cybersecurity plans have public per-user pricing on our pricing page.
Who we test for
We work with growing Australian businesses, including law firms, accountants, mortgage brokers, NDIS providers and design agencies. We are based in Tarneit, so we look after businesses in Melbourne’s west in person (see IT support for Melbourne’s west and our service areas), and we work with clients across the country.
How we get started
- We schedule a call at a time that suits you.
- We scope the test by understanding your network and what you want tested.
- We send a quote that explains exactly what is covered.
Frequently asked questions
What is penetration testing?
Penetration testing (a pen test) is an authorised, controlled attempt to break into your systems, so weaknesses are found and fixed before a real attacker finds them.
What is the difference between a penetration test and a vulnerability scan?
A vulnerability scan is an automated tool that lists known weaknesses. A penetration test goes further: it actively tries to use those weaknesses and move through your network the way an attacker would, to show what could actually be reached.
Is this a manual, consultant-led penetration test?
No. Our testing is automated and focused on your network, and it runs on Kaseya’s vPenTest platform. It suits businesses that want regular, affordable testing of their networks. If you need a consultant-led engagement or testing of a custom web application, we will tell you honestly and point you to a specialist.
How often should we do a penetration test?
A common approach is at least once a year, and again after major changes such as a new system, a move to the cloud or a change of IT provider. Because our testing is automated and on demand, you can also test more often, such as quarterly or monthly.
Will a penetration test disrupt our business?
Testing is active, so it can occasionally trigger security alerts or affect a fragile system. We agree the scope and timing with you first, and tests can be scheduled outside business hours, so you know what to expect.
How much does a penetration test cost?
The price depends on what is tested, including the number of devices and IP addresses in scope and whether you want internal testing, external testing or both. We quote after a short scoping call, so you pay for the testing you need.
Do we need a penetration test for cyber insurance?
Not always, but insurers, customers and auditors increasingly ask about security testing. A recent penetration test report can help you answer those questions. Check your policy or talk to your broker.
Can penetration testing be part of managed security?
Yes. Network penetration testing sits alongside our managed security service, which watches your systems around the clock.
How do we get started with penetration testing?
Book a call at a time that suits you. We run a short scoping conversation to understand your network and what you want tested, then send a quote that explains exactly what is covered.
Talk to us about penetration testing
Call us on 03 8764 3944, book a free consultation or send us a message.