Services

Example Reports Methodologies AI Assessment Methodology API penetration test methodology Essential Eight Assessment Methodology External penetration test methodology Internal penetration test methodology Mobile application penetration testing methodology Red team & Adversary simulation methodology Web application penetration test methodology Wireless penetration test methodology Penetration testing engagement guide Reporting Reporting process Writing a retest report Service catalogue Tools & Tricks Abusing WDAC to kill EDR Generating effective wordlists Mobile pentest: Getting started Physical Intrusion Kit Inventory Setting up a testing host in AWS Welcome Packs Penetration testing welcome pack Phishing Campaign Welcome Pack Remediation Test Welcome Pack What value does Volkis bring to penetration testing?

Operations

AI Usage Guidelines Asset Management Policy Data Retention Development Guidelines Ethical guidelines for Volkis partnerships Expenses How we use Notion How we use Resource Guru How we use Trello Internal security Acceptable usage policy Cryptography policy Data classification and protection policy Internal security overview Managing projects at Volkis Remote Working Policy Slack etiquette & usage guide Style guide Supplier Management Policy The life and times of a Project ID Third-party service providers Workflow automations & integration

People

Biographical data sheets Getting started in penetration testing Hiring / Job-seeker guidelines Industry presentations Internal Role Descriptions Onboarding guide & checklist Personal Security Policies Disciplinary Process Performance and Feedback Volkis People Benefits

Company

Brand guidelines and press pack Company overview Policies Code of ethics Independence policy State of Volkis State of Volkis 2024 State of Volkis 2026 State of Volkis, February 2023 State of Volkis, January 2022 Volkis goodies Volkis values

Client Resources

Essential Eight Guidance for Schools Penetration testing and the Essential Eight

Sales

Partner pack Scoping guide

Marketing

Social Media Guidelines

Theme

Methodologies

Updated 4 Sept 2026Services✎ Suggest a change

On this page

Penetration testing methodologies Red Team Exercises AI Assessment Essential Eight Maturity Model assessment

Penetration testing methodologies

External penetration testing: Testing from the perspective of an internet facing attacker.
Internal penetration testing: Testing from the perspective of an attacker with access to the internal network.
Web application penetration testing: Testing web applications of various sizes from an authenticated and unauthenticated attacker perspective.
API penetration testing: Testing web-based API from an authenticated and unauthenticated attacker perspective
Wireless penetration testing: Testing wireless networks, including enterprise and guest WiFi.
Mobile application penetration testing: Testing mobile applications for IOS or Android.

Red Team Exercises

Red team and adversary simulation: Long-term targeting of an organisation with business relevant objectives. Usually includes social engineering techniques and physical intrusion.

AI Assessment

AI Assessment Methodology: A review of an AI chatbot or dialogue function to ensure it cannot be manipulated.

Essential Eight Maturity Model assessment

Essential Eight Maturity Model assessment: Assess an organisation against the ASD Essential Eight standard, including identifying which controls are in place and the maturity models reached by the organisation.

← Example Reports AI Assessment Methodology →