Looking for suggestions on DLP and VAPT

Question

Hi. I work for a small company of about 10-15 remote workers. We have at least 3 physical servers (domain controllers) and roughly 5 or 6 virtual servers. We are looking to implement a DLP policy in addition to performing vulnerability assessments and penetration testing. We have one server that is Linux with the others being Windows. I can provide more information is needed, but looking to what kind of options we would have? Is there software that would accomplish all of this? Any suggestions or guidance is greatly appreciated.

Answer 1

Hi @lmoore

This type of work in my opinion should be done by professionals. I would seek vulnerability assessment and penetration testing to be done by a third party who can then give you the assessment and recommendations for securing your environment.

Penetration testing takes time, effort and knowledge of what to look for. I don't think there is really software (in-full) that will help you other than a port scanner.

As an example, I see a list of "Powerful Penetration Testing Tools" listed at https://www.softwaretestinghelp.com/penetration-testing-tools/ but you need to be knowledgeable about what to do with it and what exploits are currently on the market. Most problems can be mitigated by ensuring you are patching your servers, but if you want a more full assessment, reach out to a professional group.

---------------------------------------

If this is helpful please accept answer.