@Jimmy9008 said in Pentest - Who would you recommend?:

Or does nowhere offer that?

Of course. I've already recommended one company that offers this.

That's not what I'm asking. I'm asking how does an assessment find out if your applications are vulnerable to SQL injection?

Literally, how, if not by pen testing them?

Ok, so how does an assessment find out if your applications are vulnerable to SQL injection (for example)?

@IRJ said in Pentest - Who would you recommend?:

You definitely don't want a pen test, you need a security assessment. There will be plenty of things to fix, and after securing the network then you could do a pen test the following year.

Same thing. What do you think an assessment will do that a pentester won't (and vice versa)?

@Breffni-Potter said in Pentest - Who would you recommend?:

@Carnival-Boy The only issue with sec-1 is they are a Claranet company. Claranet...

They only bought them 3 weeks ago! But, yeah, one to keep an eye on, for sure.

I've never actually used them, but I've been to a couple of seminars by Sec-1 which were awesome. I really liked them. If I was going to do a pentest, I would want to use them. I recommend you go to one of their seminars as they're free and pretty intense and educational, and not salesy at all.

How do these compare with the EliteBooks and the Elite X2s (both of which I buy)? So many HP models, I can't keep up...

@Dashrender said in SMB vs Enterprise:

I don't know if this is true or not, but I'm hearing this is the case regarding Muslims in the UK. There are sections of the UK where the police don't even go because Sharia Law is taking over.

You need to stop following Donald Trump on Twitter :)

Loving the Marvin Gaye reference in the title.

They are. They're specialist shelf stackers. They'll be much better than you at stacking shelves because of their practice and experience. Their rate of dropping cans of beans will be much better than yours.