Bunkers Cyber Defense

Penetration testing

Penetration testing and security consultancy

A penetration test reproduces, with your consent and within an agreed scope, what an attacker would do against your websites, applications, infrastructure or cloud environments, then documents every weakness with its evidence and its fix. Bunkers Cyber Defense combines human expertise with AI-assisted tools and extends the test with advice and a security strategy fitted to your SMB, MSP or municipality.

What it includes

  • Penetration testing of your websites, applications, infrastructures and cloud environments
  • A tailored security strategy
  • Cybersecurity advisory
Talk to us about your security
  • A penetration test of your systems
  • A tailored security strategy
  • Cybersecurity advisory

Sample report · fictional

What you receive at the end of a test

Built to show the structure of a report; no client data.

penetration-test-report.txt

  1. [+] Reconnaissance … 3 hosts, 14 exposed services
  2. [+] Exposed service: SMB · 445/tcp · CVSS 7.5
  3. [+] Web application: SQL injection (login form) · CVSS 9.1
  4. [!] Finding 1 of 6 · critical · evidence: request, response, screenshot
  5. [+] Proposed fix · recommended deadline: 7 days
  6. [+] Retest included after remediation
  7. Report delivered · 12 pages · 6 findings · 2 critical

How it goes

  1. 01

    Assess

    Audit, compliance assessment or penetration test: we first measure where you stand.

  2. 02

    Protect

    Safeguard websites, cloud environments and corporate networks; tailored security strategies and compliance frameworks.

  3. 03

    Watch

    Proactive threat detection and incident response, 24/7.

Frequently asked questions

All the questions →

What is a penetration test?

A simulated attack, authorized and framed by contract, carried out by specialists who use attackers' methods to find the weaknesses of your systems before they do. The result is a report: each weakness with its evidence, its severity, its impact for your business and the recommended fix. The test ends with a retest after remediation.

What is the difference between a vulnerability scan and a penetration test?

The scan is automated: it compares your systems against a database of known vulnerabilities and produces a list, with false positives. The penetration test adds human judgement: chaining several weaknesses, bypassing a protection, measuring the real impact. Scanning happens often; penetration testing, periodically and after a major change.

How often should we run a penetration test?

At least once a year and after any major change: a new application, a cloud migration, a network overhaul. Some frameworks require it explicitly, such as PCI DSS for the payment card environment. Between two tests, regular scanning and monitoring cover newly published vulnerabilities.

How much does a penetration test cost?

The price depends on the scope (number of systems, applications, addresses), the depth (black, grey or white box), the duration and whether the retest is included. A test focused on one web application costs less than a full test of the external and internal infrastructure. A free scoping call allows a precise quote rather than a range.

What does a penetration test report contain?

A scope and a method, an executive summary, each finding with its severity (often a CVSS score), the evidence (requests, screenshots), the concrete impact, the recommended fix and a suggested deadline, then an ordered remediation plan. A good report reads for a manager and for a technician; it ends with a scheduled retest.

Go further

All resources →

Updated September 13, 2026

What a penetration test report contains

The six sections of a penetration test report and how to read them: scope, method, findings ranked with CVSS, evidence, remediation plan, retest. Sources:…

Read →

Related services

All services →