FTC Safeguards Rule Penetration Testing
The FTC Safeguards Rule calls for penetration testing at firms like auto dealers, mortgage brokers and tax firms. We run the tests you need.
FTC Safeguards Rule penetration testing is a hands-on attempt to break into your systems, run once a year. The FTC's rule calls for it at many non-bank financial firms, and we run it.
Which firms does the Safeguards Rule cover?
The FTC enforces the rule for financial businesses that are not banks. The rule's own examples include:
- Auto dealers that lease vehicles.
- Mortgage brokers.
- Accountants and other tax preparers.
The FTC also names mortgage lenders, finance companies and credit unions without federal insurance. Ask your attorney whether the rule covers your business.
Federally insured banks and credit unions follow other rules. See bank penetration testing and credit union penetration testing.
What does a Safeguards Rule penetration test look like?
A penetration test is a hands-on attempt to break into your network. We hunt for weak passwords, misconfigured services and unpatched systems. Then we use them to see how far an attacker could get.
You get a report that shows each path we found and how to fix it. We scope each yearly test around your biggest risks, and we can run it from the internet, from inside your network, or both. See our network penetration testing page for the details.
The rule also calls for regular vulnerability scans, and we run those too. See vulnerability scanning and assessment.
Why Red Raine Labs?
Red Raine Labs is owner-operated. The experienced tester who scopes your test also runs it and writes the report. We never hand your test to a junior tester.
- Real attacks. We exploit weaknesses to show what an attacker could reach. We do not hand you scanner output.
- A report for two readers. Your leaders get an exectuive summary. Your IT help gets every finding with proof and a fix. Then we walk you through it.
- Remote or on site. We can test your business from anywhere in Michigan, and most tests run from our side.
Related services and reading
- Pentest vs vuln scan: what each one tells you, and which one you need.
- How to prepare for a penetration test: a free checklist for scope, timing and rules of engagement.
- Bank penetration testing and credit union penetration testing: the rules for federally insured institutions.
Read the sources
Do not take our word for it. Read the rule yourself.
Ready to scope your yearly test?
Tell us what your business does and how your network is set up. We will help you scope the test.
Let's Talk Through Your Scope