CyberLabs · Penetration Testing Hub

Penetration Testing, Explained Properly

Most Irish security sites tell you that you need a penetration test. This hub shows you what one involves, what you can check yourself first, what to expect if you hire out, and when you don't need one yet. No sales pages — just the field manual. Only ever test systems you own or are authorised to test.

Start here

Penetration Testing ExplainedThe pillar: what a test is, the types, the method, and when you don't need one.

How each test is done

Wi-Fi penetration testingTest your wireless network — method, checklist, and where DIY stops.Network penetration testingInternal and external network testing, walked through.Active Directory testingHow attackers reach domain admin, and how to harden first.Web application testingOWASP-based methodology and a self-check for your own app.API penetration testingAPI-specific flaws (BOLA and friends) and how they're tested.Cloud (Azure/M365) testingAzure & M365 identity, configuration, and the provider rules.OT & ICS testingWhy OT testing is different — and how it's done safely.

Before you buy

Do you need a pentest yet?An honest answer, including when it's "not yet".Pentest vs vulnerability scanThe difference that the market blurs, and which you need.What to expect from a pentestStage by stage, so nothing is a surprise.What a pentest costs in IrelandWhat drives the price, and how to compare quotes fairly.Irish provider guideAn honest buyer's guide — including firms that aren't us.

Compliance triggers

Penetration testing for NIS2How testing fits NIS2, and how to make it count as evidence.Penetration testing & PCI DSSWhat requirement 11.4 actually asks for, segmentation included./dora/The full DORA & threat-led penetration testing (TLPT) hub.

For people learning

Become a pentesterA realistic, no-hype roadmap into the field.CREST vs OSCPWhat each certification proves, for testers and buyers.

See the work

Sample pentest reportSee a real, redacted report before you commission one.How working with us worksThe plain, no-pressure version of working with us.

Everything here is educational, not legal advice. Only test systems you own or are explicitly authorised to test, under the Criminal Justice (Offences Relating to Information Systems) Act 2017.