We want to perform a security check of our Web servers architecture from the outside (Internet external access).
I'm looking for either
- a company providing such a service, please provide recommendations
- a tool that could perform exhaustive checks, without affecting the well-running of the platform
This is something we want to do on a regular basis (every 6 months).
That service or tool should be able to perform hacker-like attacks (but no DOS) in order to ensure we are not vulnerable to known hacking methods (or system not patched etc...).