Knowledge is a matter of definitions. Here you will find the most important technical terms for cybersecurity.

White Box (Test Type)

IT security audits may be characterized according to the degree of information the testers and the administrators of the systems in scope have when the tests are carried out. The objective of the white-box test is to simulate an attack with insider information. The testers obtain all information of the systems to be audited in detail. This view reflects the definition of the BSI (M 5.150). In contrast, the OSSTMM equates the white-box test with a “double gray box” test (see also grey box).

Don’t miss anything! Subscribe to our free newsletter.

Your security is our top priority – our specialists provide you with professional support.

Availability Monday to Friday 8:00 a.m. – 6:00 p.m (exception: customers with SLA – please call the 24/7 IRR emergency number).

Private individuals please contact your trusted IT service provider or the local police station.

For more information about our DFIR services here:

Add CSIRT to contacts