S2W Expands Penetration Testing Business

Supporting the Transition to a Continuous Threat Exposure Management Framework

Big data analytics and artificial intelligence (AI) company S2W announced on November 6 that it will expand its 'penetration testing' business, leveraging the full breadth of its cyber threat intelligence (CTI) technology expertise.

As corporate information technology (IT) environments are rapidly evolving with the accelerated adoption of Software-as-a-Service (SaaS) and cloud computing, there is a growing recognition that conducting only one or two regular tests per year is insufficient to defend against the ever-changing attack surface.

In response to this market demand, S2W provides sophisticated and advanced penetration testing services that encompass digital risk protection (DRP), attack surface management (ASM), and threat intelligence (TI). The company highlights its strength in identifying attack surfaces using its proprietary ASM solution and applying a risk determination algorithm honed through years of analytical expertise, thereby visually presenting customers with a prioritized list of internal assets requiring attention. In addition, S2W has established a system for testing publicly disclosed vulnerabilities, enabling tests based on real-world attacker scenarios.

S2W plans to gradually expand its penetration testing business, aiming to address security incidents not only in the IT and financial sectors but also across industrial, operational technology (OT), and supply chain fields, where cyber threats are rapidly increasing. The company also intends to meet the ongoing assessment needs of enterprises by providing independent security verification results required by various regulations and cyber insurance reviews.

Yang Jongheon, Head of Offensive Research at S2W, stated, "Penetration testing is significant in that it provides practical, evidence-based verification of the exploitability of vulnerabilities detected by automated scanning and helps determine their prioritization. This allows customers to respond first to risks that attackers could realistically exploit." He added, "S2W's penetration testing business is differentiated by integrating exposure visualization, real-time vulnerability prioritization, and automated response, thereby supporting the transition to a Continuous Threat Exposure Management (CTEM) framework."