#United States #Philadelphia #PCI DSS #Penetration Testing #Clone Systems

Expansion of Penetration Testing Services by Clone Systems

Clone Systems, Inc. has unveiled a significant enhancement to its penetration testing services, aiming to simplify and expedite the testing process for organizations. Since its establishment as a PCI SSC Approved Scanning Vendor in 2007, Clone Systems has consistently positioned itself at the forefront of cybersecurity solutions. Now, with the introduction of same-day automated penetration testing, clients can commence their assessments without delay.

Key Features of the New Offering

The newly expanded offerings from Clone Systems allow organizations to purchase automated penetration tests online, enabling immediate initiation of testing. For companies requiring more tailored approaches, a certified engineer can manage the entire engagement—from scoping to remediation retesting.

This service not only meets the standards of PCI DSS 4.0.1 but also fulfills various regulatory needs, including HIPAA, SOC 2, and ISO 27001. With testing options that span networks, applications, APIs, cloud environments, and other vital infrastructures, organizations can ensure comprehensive coverage of their security protocols.

Distinguishing Scans from Pen Tests

It’s crucial to emphasize that while both Automated Scanning and Penetration Testing serve distinct functions under PCI DSS, they are often misunderstood. An Automated Scanning Vendor (ASV) scan identifies vulnerabilities within the cardholder data environment, whereas penetration testing evaluates if these vulnerabilities can be exploited to gain unauthorized access. As organizations aim for compliance, specific compliance frameworks require distinct approaches for penetration testing, particularly under the Self-Assessment Questionnaire (SAQ) guidelines for PCI DSS.

Advanced Automated Testing Capabilities

Clone Systems' advanced automated testing goes a step further than traditional vulnerability scanning. The service is designed to safely assess whether identified weaknesses can indeed be exploited. Clients can easily define their testing targets via the Clone Systems portal and initiate tests within minutes, eliminating the backlog often associated with waiting for engineering resources or the need for additional software installations.

Production-safe tests mapped to MITRE ATT&CK can comprehensively evaluate crucial areas such as external infrastructure, internal networks, and Active Directory as well as cloud environments and web applications. Importantly, authenticated web application testing also checks login-restricted areas, ensuring that APIs, application functionality, and workflows are thoroughly assessed post-login.

The reports generated prioritize findings based on potential exploitability and impact rather than merely severity, meaning that organizations receive actionable insights tailored to their unique risk profiles. Clients can rerun the tests within the same 30-day window post-remediation to confirm vulnerabilities have been effectively mitigated.

Fully Managed Testing for Complex Environments

For those with larger or more complex infrastructures, Clone Systems offers a fully managed service led by one of their experienced security engineers. The assessment process starts with an initial scoping discussion, followed by a clearly defined statement of work. Throughout the assessment, clients maintain direct communication with their designated engineer, ensuring streamlined execution and accurate reporting.

The engagement also includes a remediation retest to validate that identified issues have been resolved. The impressive skill set of Clone Systems' testing team boasts certifications including CISSP and Certified CMMC Professional (CCP), complemented by specialized training in areas like API penetration testing and malware analysis.

A Unified Testing Platform

The platform unifies automated and managed testing approaches, leveraging Clone Systems' proprietary tools alongside established open-source security instruments. This blend allows customers to access multiple testing methodologies from a single system while ensuring cohesive findings and remediation guidance.

“This advancement significantly reduces the delays many merchants encounter, especially when pen test requirements coincide with when their SAQs are due,” said Elyse Hamilton, Clone Systems’ Vice President of Business Development. “We’ve removed that bottleneck, enabling straightforward environments to kick off automated testing without hesitation.”

Pricing and Availability

The automated penetration testing tools are currently accessible with a competitive starting price of $1,995 for a 30-day evaluation window. Annual programs are also available beginning at $5,995, with authenticated testing for web applications starting at the same price for up to ten applications.

For organizations needing more comprehensive assessments—whether for PCI, applications, APIs, or cloud infrastructures—Clone Systems encourages clients to consult with their team for a scalable penetration testing experience.

As a trusted name in managed security and compliance since 1998, Clone Systems, Inc. remains dedicated to fortifying security protocols across various industries, including finance, retail, healthcare, hospitality, and technology, globally.

Media Contact:
Jorja Mandy
Director, Strategic Development
Clone Systems, Inc.
[email protected]