Pentesting

Articles on pentesting from the Ironbark Cyber team.

How Much Does a Penetration Test Cost in Australia?

How Much Does a Penetration Test Cost in Australia?

Penetration test cost in Australia: real guide prices from AU$6,000–18,000, what drives price up or down, and how fixed-price scoping actually works.

How to Choose a Penetration Testing Company

How to Choose a Penetration Testing Company

How to choose a penetration testing company: the red flags to avoid and the questions to ask about testers, methodology, retesting and report quality.

Penetration Testing for Startups: When and What to Test

Penetration Testing for Startups: When and What to Test

When a startup actually needs its first penetration test, what to test first on a limited budget, and how to turn the report into a sales asset.

Physical Penetration Testing: What It Is and What You Learn

Physical Penetration Testing: What It Is and What You Learn

Physical penetration testing puts your locks, badges and staff to the test. What engagements cover, the legal and rules-of-engagement basics, what you learn.

API Penetration Testing: A Practical Guide

API Penetration Testing: A Practical Guide

API penetration testing explained: how it differs from web app testing, the OWASP API Security Top 10, and how to test an API without a spec.

Assumed Breach Testing Explained: What Happens After the Phish

Assumed Breach Testing Explained: What Happens After the Phish

Assumed breach testing shows what an attacker can do after the first phish lands. What it is, how it differs from external testing, and why it matters.

Web Application Penetration Testing Methodology: A Full Guide

Web Application Penetration Testing Methodology: A Full Guide

A practical web application penetration testing methodology: recon, authentication, access control, business logic, injection and reporting, step by step.

GraphQL Security Testing: Common Vulnerabilities and How to Test

GraphQL Security Testing: Common Vulnerabilities and How to Test

GraphQL security explained: introspection exposure, query depth abuse, batching attacks and field-level authorisation, plus how to test for each.

Bug Bounty vs Penetration Testing: Which Do You Need?

Bug Bounty vs Penetration Testing: Which Do You Need?

Bug bounty vs penetration testing: what each is good at, where each falls short, and why mature security programs run both instead of choosing one.

Red Team vs Penetration Test: What's the Difference?

Red Team vs Penetration Test: What's the Difference?

Red team vs penetration test: how they differ in scope, goals, duration and cost, and how to work out which one your organisation should buy.

Put this into practice

A senior Ironbark Cyber consultant will scope your engagement on a free 30-minute call and give you a fixed quote within one business day.