Penetration Testing & Cybersecurity Services For Portland Businesses

Does the Oregon Consumer Privacy Act require penetration testing?

Not explicitly. The OCPA, effective July 2024, gives Oregon consumers rights over their personal data and requires covered businesses to maintain reasonable data security practices. What counts as reasonable tends to be assessed after an incident, and evidence of regular testing is a considerably stronger position than an untested policy.

How much does a penetration test cost in Portland?

Price follows scope, not location. We quote a fixed number based on the applications, networks, and cloud environments in scope, so you are not working from an hourly estimate that drifts. No discovery call is required before you get a number.

We are a DTC brand. What is actually in scope?

Usually more than teams expect. Your storefront, payment integration, customer database, loyalty system, and any admin interfaces all touch customer or cardholder data. If card data reaches your systems at all, PCI DSS applies, including annual testing under Requirement 11.4. Scoping properly at the start is what keeps the engagement from being either too narrow to be useful or broader than you need.

Do you test hardware and manufacturing environments?

We test the network and application layers and the segmentation between corporate and engineering environments. For firms along the Hillsboro and Beaverton corridor, that separation is frequently where the meaningful findings are — design files and engineering systems are often more reachable from the corporate network than expected.

How fast can we get a report for a customer security review?

Testing typically starts within days, and reports are delivered 72 hours after testing completes. If a deal is blocked on a security questionnaire, tell us the deadline and we will confirm whether it is realistic rather than agreeing and hoping.

‍