World ClassVulnerability AssessmentsNETWORK|HOST|APPLICATION|WIRELESSPatchAdvisor will help you see your network the way a hacker does - as a series of opportunities waitingto be exploited. Our vulnerability assessment methodology, proprietary toolkit and unequaled expertise provide a morecomprehensive assessment than the standard industry network vulnerability scan. Our experienced engineers understand how toexploit and leverage vulnerabilities on all networked systems. The result on most networks is that a single low rated vulnerabilitywill lead us through the network to ultimately gain full administrative access across the enterprise.
We call this the “domino effect,” and we have been using it to compromise networks for over a decade.

NETWORK VULNERABILITY ASSESSMENTSCase study: A single vulnerability on an insecure printer disclosed vital information that led to widespread network compromise ata major government contractor. Attackers will utilize all the information they can uncover to conduct successful attacks. That’s whyPatchAdvisor’s team of industry experts will evaluate all devices on your networks from the printers tothe mainframe, across all available protocols and networking types to ensure that no stone is left unturned, and no attack pathsare left open.

HOST VULNERABILITY ASSESSMENTSCase study: Incorrect file permission settings on a single customer-developed script allowed our team to quickly gain systemadministrator access on a critical manufacturing process-control server. Attackers often find similarly creative ways to escalateprivileges on hosts. That’s why PatchAdvisor goes beyond the typical industry standard for evaluating hosts. From checkingauthentication methods to validating file permission settings and verifying patch levels, we utilize multiple forms of compliancetesting, best practices, and a hacker mentality to evaluate the complete effectiveness of your host-level security.

APPLICATION VULNERABILITY ASSESSMENTSCase study: Due to improper error handling routines in a single corporate application, our team was able to locate anSQL-injection attack and gain access to almost two million customer accounts on a financial services web-server. Most corporateweb servers are actually a collection of numerous applications that give consumers the ability to interact with vital corporatedatabases. From exhaustive black-box tests to complete source-code reviews, PatchAdvisor can work with your organization toensure that your application is not putting you or your customers at risk.

WIRELESS NETWORK ASSESSMENTSCase study: An unauthorized wireless access point protected with WEP allowed our team to quickly gain access to theinternal network of a large energy company. Employees often deploy wireless devices without thinking of the securityramifications or their violation of existing company policies. PatchAdvisor can help you locate and remove these roguedevices while ensuring that any authorized wireless devices are truly communicating in a secure fashion.

We’ll show you what your scanner is missing.	  

To get started, contact us today at 703.256.0156 or info@patchadvisor.com	   Cherokee Avenue, Suite 120 | Alexandria, Virginia 22312 | www.patchadvisor.com5510
	  	  	  PatchAdvisor will exceed your expectations.
UNPARALLELED INDUSTRY EXPERIENCEOur technical team members have performed vulnerability assessments domestically and internationally for companies in virtuallyevery vertical market. Members of our team have written or contributed to numerous books on information security and theInternet, and also presented at over 80 professional conferences. Additionally, team members have provided expert commentaryfor programs like 60 Minutes and have been featured worldwide on television stations such as CNN, MSNBC, BBC and NHK.

IN-DEPTH ANALYSISOur reports provide a customized roadmap for securing your particular environment- not just a list of vulnerabilities. Every reportprovides an informative and thorough analysis of the vulnerability posture of your network, and provides recommendations forfixing all issues. Every report also contains an executive summary targeted to management as well as specific prioritized technicalremediation steps for administrators.

VALIDATED RESULTSAll assessment results are verified through a manual verification process. This process benefits you by virtually eliminating falsepositives, a task most assessment companies will leave for you to perform.

PRODUCT NEUTRAL SERVICESPatchAdvisor is not a product vendor or a VAR. We do not simply rely on commercial scanning products in our assessments.
Therefore you can be assured that our recommendations will be based solely on what is best for your environment and do notcontain any hidden product or managed service sales agenda.

PARTNERSHIP WITH OUR CLIENTSWe establish strong and lasting relationships with our clients. Over 90% of our business comes through established relationshipsand recurring engagements. Our goal is help our clients build and maintain an outstanding security program that will protect theirenvironment now and for the future.

A MAXIMIZED INVESTMENTOur vulnerability assessment process and toolkit have been proven and refined over the last decade. Our engineers typicallyrequire less time and provide more actionable results than our competitors. We will maximize your investment, lower your liabilityand increase data confidentiality.

We’ll show you what your scanner is missing.	  

To get started, contact us today at 703.256.0156 or info@patchadvisor.com	   Cherokee Avenue, Suite 120 | Alexandria, Virginia 22312 | www.patchadvisor.com5510