Core Sentinel

Core Sentinel is a penetration testing company based in Sydney that works across Australia and takes on international jobs. Senior testers holding OSCE and OSCP certifications do the work, and every report ends with a ranked list of fixes the client can act on straight away.

What Core Sentinel offers

• Application testing — web apps, mobile apps on iOS and Android, and APIs, following OWASP guidance for client, server and data-in-transit checks.
• Infrastructure testing — internal and external networks, firewalls, IPS, VPNs, wireless and internal domains, including assumed-breach scenarios.
• People testing — phishing, ransomware and social engineering exercises across a whole workforce.
• Remediation services — incident response, forensic media copies, password audits, architecture and risk reviews, secure code reviews and web application firewalls.
• Phishing takedown — removing phishing and lookalike sites anywhere in the world.

Who it works with

Organisations with a compliance duty, companies whose clients ask for a test, and firms recovering from a breach. Its reports map to Essential Eight, ISO 27001, ST4S, APRA CPS 234, IRAP and SOCI requirements, and it offers testing that meets payment card industry rules.

Key facts

• Based in: Sydney, Australia
• Certifications: OSCE and OSCP testers
• Deliverables: prioritised fix list, a retest and a letter of attestation