Find your platform's weaknesses before anyone else does
We assess your Moodle's security with vulnerability scans and penetration testing (pentestingpentestingPenetration testing: a controlled attack simulation to check whether weaknesses can be exploited.), and give you a clear plan to fix what we find.
Security testing: scanning and pentesting
What you gain
The real security status of your platform, with prioritized risks and concrete recommendations.
Sound familiar?
Check what's happening to you today.
What's included and what you can add
What the service includes
- Scope definition Platform, server, plugins and integrations.
- Signed authorization agreement
- Controlled execution Without disrupting your operations.
- Report with vulnerabilities, risk and evidence
- Prioritized recommendations and results presentation
Two kinds of test
- Vulnerability scan
- An automated review of known weaknesses.
- Pentesting
- A controlled attack simulation by specialists.
- Vulnerability scan
- What weak spots does my platform have?
- Pentesting
- How far could an attacker get?
- Vulnerability scan
- Broad and fast.
- Pentesting
- Deep and targeted.
- Vulnerability scan
- Periodic.
- Pentesting
- Before launches or after major changes.
Additional services you can add Not included: you can add them with us, depending on your project
Fixing vulnerabilities If your platform is with Edu Labs, we coordinate it; otherwise it's quoted separately.
A guarantee of total security No test guarantees a platform is invulnerable.
Certification The report is evidence, not a certification.
Social engineering Not part of the standard scope.
Phases, timelines and deliverables
A scan is faster than a pentest. Timing depends on the systems and integrations involved.
Scope and authorization agreement. Technical report with risks and evidence. Executive summary. Prioritized recommendations. Verification record, if contracted.
- Scope What's assessed, type of test and window.
- Authorization Authorization and confidentiality agreement.
- Execution Scanning, pentesting or both.
- Analysis Validated findings, no false positives.
- Report and presentation Technical report and executive summary.
- Verification (optional) We check that the vulnerabilities were closed.
What it would look like in practice
An institution is preparing for an information security audit.
An eight-year-old Moodle with more than 30 plugins and two in-house developments, never assessed.
A platform and server scan, pentesting of critical modules and verification of fixes.
Known risks, critical issues fixed and evidence for the audit.
Frequently asked questions
Can the tests affect my platform?
They run in a controlled way within an agreed window; we explain the risks beforehand.
Scan or pentest?
A scan gives you a broad view; a pentest goes deep. Many organizations combine both.
Is the report confidential?
Yes, under a confidentiality agreement.
Have a project in mind?
Tell us about your case and we'll reply with a tailored proposal.