https://www.pentestly.io/blog Penetration testing research, attack techniques and practical remediation guidance from Pentestly. en-gb Wed, 19 Aug 2026 08:29:38 GMT 60 https://www.pentestly.io/blog/internal-penetration-testing-guide https://www.pentestly.io/blog/internal-penetration-testing-guide Wed, 24 Sep 2025 00:00:00 GMT
Plan an internal penetration test around identity, segmentation and critical assets, with practical guidance on scope, access, evidence, reporting and retesting.]]> Internal Security Penetration Testing Red Teaming Vulnerability Management Network Security Security Best Practices Aidan Preston https://www.pentestly.io/blog/supabase-security-best-practices-2025-guide https://www.pentestly.io/blog/supabase-security-best-practices-2025-guide Tue, 09 Sep 2025 00:00:00 GMT
Harden Supabase with the following cheat-sheet with clear steps for RLS, schemas, Edge Functions, Storage, CORS and tokens. Built from real audits.]]> Database Security Penetration Testing Supabase Integration Data Compliance Security Best Practices Supabase Security Aidan Preston https://www.pentestly.io/blog/how-often-should-penetration-testing-be-done https://www.pentestly.io/blog/how-often-should-penetration-testing-be-done Fri, 05 Sep 2025 00:00:00 GMT
Learn when annual, quarterly and change-triggered penetration testing make sense, with a practical risk-based schedule for UK organisations.]]> Penetration Testing Testing Frequency Compliance Risk Management PTaaS Aidan Preston https://www.pentestly.io/blog/penetration-testing-for-msps-how-to-offer-security-as-a-service https://www.pentestly.io/blog/penetration-testing-for-msps-how-to-offer-security-as-a-service Thu, 04 Sep 2025 00:00:00 GMT
A practical guide for MSPs adding penetration testing to their services, covering permissions, scoping, supplier selection, client separation, reporting and retesting.]]> Penetration Testing Managed Service Providers PTaaS Scoping Security Services Aidan Preston https://www.pentestly.io/blog/penetration-testing-vs-penetration-testing-as-a-service-ptaas https://www.pentestly.io/blog/penetration-testing-vs-penetration-testing-as-a-service-ptaas Wed, 03 Sep 2025 00:00:00 GMT
Understand the real difference between a one-off penetration test and PTaaS, including delivery workflow, tester involvement, reporting, retesting and cost.]]> Penetration Testing PTaaS Security Testing Retesting DevSecOps Aidan Preston https://www.pentestly.io/blog/penetration-testing-for-startups-a-guide-for-founders https://www.pentestly.io/blog/penetration-testing-for-startups-a-guide-for-founders Tue, 02 Sep 2025 00:00:00 GMT
A founder's guide to scoping penetration testing around launches, customer assurance and limited budgets, including the responsible use of AI.]]> Penetration Testing Cybersecurity Startups AI-assisted Testing Risk Management Compliance Security Assessment Vulnerability Detection Security Strategies Aidan Preston https://www.pentestly.io/blog/iso27001-penetration-testing-do-you-really-need-it-for-compliance-in-the-uk https://www.pentestly.io/blog/iso27001-penetration-testing-do-you-really-need-it-for-compliance-in-the-uk Mon, 01 Sep 2025 00:00:00 GMT
Learn where penetration testing fits ISO 27001:2022, when a risk-based test is appropriate, what evidence auditors may review and how to scope it.]]> ISO 27001 Penetration Testing Compliance Risk Management UK Cybersecurity Aidan Preston https://www.pentestly.io/blog/the-role-of-penetration-testing-in-cyber-insurance-underwriting https://www.pentestly.io/blog/the-role-of-penetration-testing-in-cyber-insurance-underwriting Sat, 30 Aug 2025 00:00:00 GMT
Understand how penetration-test evidence may support cyber-insurance applications and renewals without assuming it guarantees cover, pricing or a successful claim.]]> Cyber Insurance Penetration Testing Risk Management UK Cybersecurity Underwriting Aidan Preston https://www.pentestly.io/blog/top-5-penetration-testing-companies-in-the-uk https://www.pentestly.io/blog/top-5-penetration-testing-companies-in-the-uk Thu, 28 Aug 2025 00:00:00 GMT
Compare five penetration testing providers serving UK organisations, their published delivery models, and the questions that reveal which one fits your scope.]]> Penetration Testing UK Cybersecurity Vendor Selection PTaaS Red Teaming Aidan Preston https://www.pentestly.io/blog/iso-27001-vs-soc-2-do-you-need-both-security-frameworks https://www.pentestly.io/blog/iso-27001-vs-soc-2-do-you-need-both-security-frameworks Tue, 12 Aug 2025 00:00:00 GMT
Compare ISO 27001 certification and SOC 2 reports, including scope, audit outcomes, market expectations, control mapping and where penetration testing fits.]]> ISO 27001 SOC 2 Compliance Information Security Penetration Testing Aidan Preston https://www.pentestly.io/blog/the-ultimate-guide-to-cyber-essentials https://www.pentestly.io/blog/the-ultimate-guide-to-cyber-essentials Wed, 06 Aug 2025 00:00:00 GMT
A current guide to Cyber Essentials and Cyber Essentials Plus, including the five controls, version 3.3 changes, scope decisions and where pentesting fits.]]> Cyber Essentials Cyber Essentials Plus Compliance Cloud Security Patch Management Aidan Preston https://www.pentestly.io/blog/top-vulnerability-management-best-practices-2025 https://www.pentestly.io/blog/top-vulnerability-management-best-practices-2025 Wed, 10 Jul 2024 00:00:00 GMT
Build a risk-based vulnerability management programme covering asset context, prioritisation, remediation ownership, automation, verification and useful metrics.]]> Vulnerability Management Risk Management Security Operations Network Security Patch Management Security Best Practices Aidan Preston https://www.pentestly.io/blog/master-the-vulnerability-management-process https://www.pentestly.io/blog/master-the-vulnerability-management-process Wed, 22 May 2024 00:00:00 GMT
Build a risk-based vulnerability management process spanning asset discovery, validation, prioritisation, ownership, remediation, verification and useful metrics.]]> Vulnerability Management Risk Management Security Operations Patch Management Cybersecurity Strategy Security Best Practices Aidan Preston https://www.pentestly.io/blog/your-guide-to-certified-penetration-testing https://www.pentestly.io/blog/your-guide-to-certified-penetration-testing Sun, 24 Mar 2024 00:00:00 GMT
Understand penetration testing credentials and organisational accreditations, how to evaluate tester capability, define scope, review evidence and plan retesting.]]> Certified Penetration Testing Compliance Cybersecurity Vulnerability Management ISO 27001 SOC 2 PCI DSS Aidan Preston https://www.pentestly.io/blog/how-to-attack-kerberos-101 https://www.pentestly.io/blog/how-to-attack-kerberos-101 Sun, 10 Mar 2024 00:00:00 GMT
A professional guide to Kerberos attack techniques and the defensive controls that stop them, covering tickets, delegation and Active Directory misconfigurations.]]> Kerberos Active Directory Attack Techniques Defensive Security Windows Security Aidan Preston https://www.pentestly.io/blog/your-guide-to-external-penetration-testing https://www.pentestly.io/blog/your-guide-to-external-penetration-testing Wed, 15 Nov 2023 00:00:00 GMT
Plan an external network penetration test around exposed assets, safe exploitation, evidence, reporting and remediation, with practical scoping questions for buyers.]]> External Security Network Penetration Red Teaming Vulnerability Management Perimeter Security Security Best Practices Aidan Preston