Hi @Suggy ,
Answers:
I wanted to know what is Penetration testing all about?
In simple terms its used to identify vulnerabilities in systems, networks, and applications to avoid getting the system hacked in future. its also called Ethical Hacking.... (safe guarding your infra and applications).
1. Few posts say its free, few say the cost should be borne by customer.
(Pentest takes time and material so its not free. Some companies have their internal team who can do pen test when requested so it may sound free but actually its not. if there are no internal team who does pen test then they get it done by external service provider )
2. Few posts say pen test is for entire instance, few say it can be done per application/product. (Depends on how the enterprise is set, for greenfield implementation they do it completely and sometime they do only for particular instance/application when they are provisioned)
3. Few posts say ServiceNow can do it, few say it can be done only through 3rd party vendors but just need prior approval from ServiceNow. (ServiceNow does pen test based on its standard, but once the application is on your environment then the equation changes, mostly done by 3rd party vendors. )
4. Few posts say that we need 'Vulnerability Response ' application for doing pen test. ( if you have VR then you can manage the Vulnerability if its reported, else they vendor fixes the Vulnerability and sends a completion report and fixes)
I hope this helps....
☑️ Please mark responses as HELPFUL or ACCEPT SOLUTION to assist future users in finding the right solution....
