• Black box testing: is concerned with a brute-force attack. In this scenario, the simulation is that of a hacker who does not know the complexity and structure of a company’s IT infrastructure. Therefore, the hacker will launch an all-out attack to try to identify and exploit a weakness.
• White box penetration testing: is the opposite of this first technique. In white box testing, the tester has full knowledge of the IT infrastructure, with access to the source code and software architecture of a web application. This gives them the ability to zero in on specific parts of the system and perform targeted component testing and analysis.
• Gray box testing: uses both manual and automated testing processes in a scenario in which the tester has partial knowledge of the internal IT infrastructure. The tester might receive the software code, for example, but not the system architecture details. Gray box penetration testing is a hybrid of white box and black box testing.

Other types of penetration tests we provide: 

•  Social engineering tests: The pen test scenario tries to get an employee or third party to reveal sensitive information, such as a password, business data, or other user data. This can be done through targeting help desks or sales representatives through the phone or internet. 
• Web application tests: The pen test uses software to assess the security vulnerability of web apps and software programs.
• Physical penetration tests: Mostly used in government sites or other secure facilities, the pen test tries to access physical network devices and access points in a mock security breach.
• Network services test: This is the most common pen test scenario, in which a user tries to either locally or remotely identify openings in the network. 
• Client-side test: This is when an MSP tries to exploit vulnerabilities in client-side software programs. 
• Wireless security test: The pen test identifies open, unauthorized, or low-security hotspots and WiFi networks and tries to infiltrate through them.