Industry – Technology (ISP and Security Solutions)
Global Crossing

Global Crossing Security Solutions engineers use the SAINT scanner and SAINTexpoit penetration testing tool on customer networks.

"We are very proud to have SAINT as part of our toolkit. All execution times have been reduced, the quality of deliverables has been increased and the satisfaction of our customers has been increased. We think that SAINT is the perfect tool that complements the work of all our consultants in the field of penetration testing and vulnerability assessment."
—Diego Alberto Spahn, Senior Penetration Testing Engineer, Buenos Aires, Argentina

The Challenge – Global Crossing Security Solutions needed an automated tool that included both a vulnerability analysis and penetration testing module.

The Solution – After evaluating several products, the integrated SAINT vulnerability scanner and SAINTexploit penetration testing tools were selected for the following reasons:

• SAINT provides both vulnerability analysis and penetration testing integrated into the same interface.
• Information SAINT gathers in a scan can be used as input to the penetration testing module. This reduces execution time and the generation of false positives.
• SAINT's intuitive graphic user interface makes it easy to generate high-quality custom reports for our customers.
• SAINT's flexible licensing allows us to buy a block of IP addresses and use the license for numerous engagements.
• SAINT is customizable allowing our consultants to make very granular configurations—from very stealthy red teaming to less stealthy scenarios.

Diego Spahn and other Global Crossing Security Solutions penetration testing engineers follow the same steps as a malicious hacker, but in a contained environment. Their process includes reconnaissance, scanning, exploitation, clearing tracks, and reporting phases. They use SAINT in each phase to complement manual testing. They provide customers with results gathered throughout the process in addition to SAINT's final executive and technical reports. Diego reports that providing customers with SAINT reports has resulted in a higher level of customer satisfaction.