Penetration Testing

Nested Knowledge will undergo penetration testing of its web application on an annual basis, unless this schedule is required to be revised by Nested Knowledge. An external security firm will test the web application to identify vulnerabilities. Testing will be performed in a staging environment against the most recently deployed version of the Nested Knowledge platform. Any vulnerabilities detected will be prioritized and remediated by the Nested Knowledge development team.

Each penetration test will follow the steps:

1. Reconnaissance: gathering information before an attack
2. Enumeration: finding attack vectors
3. Exploitation: verifying security weakness
4. Documentation: Recording results

Testing History #

The last penetration test was completed by a third-party vendor on April 9th, 2025.

Revision History #

Return to Policies