Request Consultation
Services Industries Methodology Case Studies Penetration Testing Request Consultation
SERVICE // Penetration Testing

Prove what an attacker could really do.

Our consultants manually test your web applications, networks and APIs — chaining weaknesses the way a real adversary would, then showing you exactly how to close them.

Scope an Engagement What you receive
[ 01 ] Overview

More than a scan. A real-world test.

Automated scanners find known issues. A penetration test answers the harder question: what can an attacker actually achieve in your environment?

Every engagement combines manual expertise with targeted tooling to identify, validate and safely exploit weaknesses — then translates the results into clear, prioritized actions your teams can take. No noise, no theoretical risk: only findings we can demonstrate, ranked by their real business impact.

[ 02 ] Services

What We Deliver

Three service families covering reconnaissance, exploitation, and human-layer testing.

BREADTH

Vulnerability Assessment (VA)

Authenticated & unauthenticated scanning across internal and external assets. Reduces exposure surface quickly.

  • Network & infrastructure VA
  • Web application VA
  • Database / OS configuration review
  • False-positive elimination by analyst
DEPTH

Penetration Testing

Manual exploitation by certified testers, simulating real-world attacker behavior.

  • Web Application Pentest
  • Mobile Application Pentest (iOS/Android)
  • API Pentest (REST / GraphQL / SOAP)
  • Network Pentest (Internal / External)
HUMAN LAYER

Email Phishing Simulation

Targeted social-engineering campaigns to measure awareness and detection capability.

  • Spear-phishing & credential harvesting
  • Click-rate & report-rate metrics
  • Department-level benchmarking
  • Awareness training recommendations
[ 02 ] Testing Coverage

What we test.

Scope is tailored to your environment and objectives. Common engagement types include:

Web Application Testing

Authentication, authorization, business logic, injection, session handling and the full OWASP testing surface.

Internal & External Network

Perimeter exposure, internal lateral movement, privilege escalation and segmentation effectiveness.

API Security Testing

REST & GraphQL endpoints, broken object-level authorization, rate limiting and data exposure.

[ 03 ] Our Approach

A structured engagement, end to end.

Aligned to PTES and NIST SP 800-115, every engagement moves through clear phases with reporting cadence agreed up front.

  1. 01Scoping & ROEObjectives, targets, authorization & safe windows.
  2. 02ReconnaissanceMap the attack surface & exposure.
  3. 03AnalysisIdentify & validate weaknesses.
  4. 04ExploitationSafely demonstrate real impact.
  5. 05Post-ExploitAssess blast radius & pivots.
  6. 06ReportingPrioritized findings & remediation.
  7. 07RetestValidate fixes & attest.
[ 04 ] Deliverables

What you receive.

Reporting is written to be useful to both leadership and engineers — not a wall of scanner output. Every engagement includes a debrief and a complimentary retest of remediated findings.

Request a sample report structure →
01

Executive Summary

A concise, non-technical overview of risk posture and key themes for leadership and the board.

02

Technical Findings Report

Each finding with evidence, reproduction steps, affected assets and a clear severity rating.

03

Prioritized Remediation Guidance

Actionable, specific recommendations ranked by risk so your teams know what to fix first.

04

Debrief & Retest

A walkthrough session with your team, plus verification that remediations are effective.

05

Attestation Letter

Documentation suitable for auditors, customers and compliance stakeholders.

[ 05 ] Compliance Alignment

Testing that supports your compliance program.

We align engagements to the frameworks relevant to you and provide documentation suitable for auditors. ACE conducts testing in support of compliance; we do not issue certifications.

SOC 2ISO 27001PCI-DSSHIPAAPDPA (Thailand)NIST CSF
[ 06 ] Penetration Testing FAQ

Questions about the engagement.

We start with a short scoping conversation to understand your objectives, environment and constraints. From there we recommend the right type, depth and timing, and document everything in a clear statement of work and rules of engagement before any testing starts.
All three are available. Black box simulates an external attacker with no prior knowledge; grey box provides limited access to test realistic insider or post-compromise scenarios; white box maximizes coverage with full information. We recommend the approach that best matches your threat model and goals.
Operational safety is part of our rules of engagement. We agree testing windows and exclusions, avoid destructive techniques unless explicitly authorized, maintain an escalation contact throughout, and can work against staging environments where appropriate.
Findings are rated on real-world impact and exploitability, not just theoretical severity. Each is given a clear risk rating and placed in a prioritized remediation roadmap so your teams can focus on what matters most first.
Yes. A complimentary retest of remediated findings is included so you can verify fixes are effective, and we provide an attestation once issues are resolved.
// Ready when you are

Let's scope your penetration test.

Tell us about your environment and objectives. We'll recommend the right scope and outline next steps — typically within one business day.

Request a Consultation
NDA AVAILABLE ON REQUEST  ·  NO SALES PRESSURE  ·  CONFIDENTIAL