Even for small and midsize businesses, the security and response times of their IT systems are critical. Therefore it’s important to run the systems through thorough testing before launching them into production. But the execution of performance and penetration testing can be challenging. In-house teams often lack the time, experience or knowledge of the test tools and test techniques required.

1. © QATestLab. All rights reserved.
Performance and penetration
testing with a partner: how to start
Mikhail Grechukha
Program Manager at QATestLab
Marcel Diepenbroek
Director at InnSpire

2. © QATestLab. All rights reserved.
2
Mikhail Grechukha
Program Manager at QATestLab

3. © QATestLab. All rights reserved.
3
Marcel Diepenbroek
Director at InnSpire
Test Automation Solutions

4. © QATestLab. All rights reserved.
What is penetration testing?
4
Being a type of security testing, pentesting
is called to detect system vulnerabilities by
simulating malicious attacks.
For every company to keep corporate and
customers’ data protected, penetration
testing is recommended.

5. © QATestLab. All rights reserved.
Why pentesting
5
• Detect security vulnerabilities
• Protection of confidential data
• Improve company’s security strategy
• Ensure company’s reliability

6. © QATestLab. All rights reserved.
When to do pentesting?
6
Only regular penetration testing can
minimize the risks of security
vulnerabilities and ensure strong
protection of data.

7. © QATestLab. All rights reserved.
Absence of pentesting causes
7
• Customers’ database in competitors’ hands
• Disclosure of confidential data
• Theft of financial information
• Corruption of critical data
• Loss of company’s reputation

8. © QATestLab. All rights reserved.
Why partner with QATestLab &
InnSpire for pentesting?
8
A new approach and new issues detected
when switching security partners
Security and vulnerability have no
geographical boundaries
Best use of international skills and
security toolsets

9. © QATestLab. All rights reserved.
9
Examples of used international security toolsets:
• Scanners (Acunetix WVS, Zed Attack Proxy)
• Support tools (SSLStrip, Fiddler, SQLMap…)
• Manual testing by OWASP methodology
• Tools depend on the type of application:
application traffic scanning, data decryption, checks for specific types of
vulnerabilities.
• Check on types of vulnerabilities:
SQL injections, parameters pollution, URL access, storage security, invalidated
redirects and forwards, session/password management and authentication, HTTP
protection etc

10. © QATestLab. All rights reserved.
What is performance testing?
10
Performance testing is called to
improve software stability,
reliability and scalability by detecting
performance bottlenecks.

11. © QATestLab. All rights reserved.
11
Virtual user
Test time
Load
Test
Virtual user
Test time
Endurance
Test
~1h ~5hs
Virtual user
Test time
Stress
Test
Virtual user
Test time
Peak
Test

12. © QATestLab. All rights reserved.
Why performance testing
12
• Improvement of user experience
• Software stability and scalability
• Smooth workflow under different loads
• Prevention of crashes
• Acceleration of working speed

13. © QATestLab. All rights reserved.
When to do performance testing
13
Performance testing can be started
• before/during development
• a final check before go-live
database, web servers and
network should also be verified.

14. © QATestLab. All rights reserved.
Why partner with QATestLab &
InnSpire for performance testing?
14
• 1 Dutch expert managing the project
• You focus on questions & metrics
• We take care of everything:
including test execution, scripting & tool
choice, reports
• Optimum use of international skills, and
performance tools
>100 experts available!
Some examples of test
tools to be used:

15. © QATestLab. All rights reserved.
15
Contacts
E-mail: contact@qa-testlab.com
Phone: +380 (44) 501-55-48
Web-site: qatestlab.com
SkypeID: sales.qatestlab
E-mail: marceldiepenbroek@innspire.nl
Phone: +31 6 14 64 99 69

16. © QATestLab. All rights reserved.
Thank you
16