Orión's Ethical Hacking service delivers quality service and meets the customer's needs with a focus on:

-Identifying high-risk vulnerabilities in the client's AWS Cloud.

-Identifying vulnerabilities that may be challenging or impossible to detect using automated tools.

-Assessing the severity of the identified vulnerabilities and their operational impacts in the event of attacks.

-Generating a report with findings, including proof of concepts, business impact, and remediations.

When a vulnerability is detected, a thorough review is conducted, always in a controlled manner without affecting the availability of the involved services, simulating what an attacker would do if they manage to detect and exploit the vulnerability.

Orión's proposal includes a remote Ethical Hacking service using OWASP TOP 10, OWASP API TOP 10, MSTG, MASV, ASVS, PCI DSS, and using NVD-CWE, NVD-VCSS and OWASP as references for risk assessment and findings categorization.