Offensive Security & Assessment
HVA & Risk and Vulnerability Assessments
High Value Asset and Risk and Vulnerability Assessments for federal agencies.
Overview
Protect the systems your mission can't lose.
CDT performs High Value Asset (HVA) Assessments and Risk and Vulnerability Assessments (RVA) aligned to federal program requirements. Agencies engage us to test their high-priority systems, rapidly address vulnerabilities, and stop adversaries before they affect agency networks.
What's included
Capabilities
High Value Asset assessments
Assessments of the systems most critical to an agency's mission, aligned to federal HVA program requirements.
Risk and vulnerability assessments
Network mapping, vulnerability scanning, phishing, web application and database testing, and penetration testing.
Control assessments
Validation that security controls, policies and practices are operating as intended.
Vulnerability remediation strategy
A structured plan to reduce the risk of every identified vulnerability.
How we work
A proven, repeatable process.
-
1
Scope & rules of engagement
We agree on objectives, targets, timing and safety limits with your team, so testing is realistic and never disruptive.
-
2
Reconnaissance & testing
Our operators map your attack surface and test it the way real adversaries do, by hand and with automation.
-
3
Exploitation & validation
We chain findings to prove real-world impact, and tell you immediately if we find something critical.
-
4
Reporting & readout
Clear, prioritized findings mapped to MITRE ATT&CK, with an executive summary and technical detail for engineers.
-
5
Remediation & retest
We help you fix what matters most, then retest to confirm the gaps are closed.
Related services
Often paired with
Offensive Security & Assessment
Penetration Testing
Application, infrastructure, cloud and wireless testing that shows how an attacker could exploit your systems, before they do.
Compliance & Authorization
Security Control Assessments
Independent validation that your controls, policies and practices work as intended.
Threat Detection & Response
Incident Response & Digital Forensics
Contain the attack, preserve the evidence and restore operations, with forensics that stand up to scrutiny.
Let's talk
Let's talk about HVA & risk and vulnerability assessments.
Talk with a CDT engineer about your mission, your systems and your deadlines. We'll tell you honestly what it takes.