Lion Cipher Lab
Choose the right security assessment: scan, pentest, red team or bug bounty
- Penetration Testing / Red Team
- Intermediate
- ~35 min
- Free · no account required
Why it matters
'We need a pentest' is one of the most common requests a security team receives, and often the wrong one. Sometimes the real question is 'do we have known vulnerabilities?', which an automated scan answers continuously and cheaply. Sometimes it is 'is this code safe?', which a code review answers better than any black-box test. Sometimes it is 'would we detect a real attacker?', which needs a red team exercise, a different thing from a penetration test. And sometimes leadership wants a bug bounty because a competitor has one, before the organization can handle the reports it would receive.…
What you'll learn
- the question each assessment type answers
- vulnerability scanning versus penetration testing
- when a code review beats a test
- what red teaming is for, and when an organization is ready for it
- the preconditions for a bug bounty
- matching an assessment to a request
- combining assessments into a programme
Steps in this lab
- Five assessments, five questions
- Build the comparison table
- Six requests to decide
- Answer key
- Turn the decisions into a programme