Authenticated Testing

How Many Accounts Can I Include for Authenticated Testing?

During authenticated testing an account will typically be provisioned and maintained by our customers for the purposes of testing.

Version Number: v1.0.0

Published Date: 16 Dec 2024

____________________________________________________________________________

Edgescan supports many different form of authentication for automated and non-automated testing. A comprehensive list can be viewed here.

For penetration testing, we typically require more than 1 account so our testers can confirm authorization based exploits against accounts we control, this includes horizontal & vertical privilege escalation vulnerabilities.

Edgescan supports self-service account creation. If you have an existing account creation workflow, we can create an account and use that for the purposes of testing.

 

For authenticated testing we recommend the following.

Service Min. Accounts/Roles Max. Accounts/Roles
Penetration Testing, Including Advanced Licences & Penetration Test Addons. 1 4
Authenticated DAST Testing 1 2
Internal Network Testing 1 1