Compliance Penetration Test

Project Description

Our client has requested we bid on their annual compliance penetration test. They bare a large international insurance company.  We want the selected consultant to identify ways to exploit vulnerabilities to circumvent or defeat their security features of one of their web facing portals.  In scope is both testing at the network layer and the application layer.  Network vulnerabilities should be outlined in the final report, however the consultant should not spend time attempting to exploit these vulnerabilities if any.  All activity should be focused on the actual application.

It is essential that a signed and emailed copy of our NDA be received prior to acceptance of a bid.  This NDA is attached to this posting.  The NDA should be emailed to – [email protected]

XENTRX will provide a project manager and the client will provide a single point of contact for this project.

• xentrx-nda.docx