With a TS 13638 certified team,
standards-compliant penetration testing
Our TS 13638-T2 certification independently assures personnel competence, methodology, confidentiality and reporting requirements.
What Is TSE 13638 Penetration Testing?
The TS 13638-T2 standard, "Information Technology – Security Techniques – Requirements for Personnel and Firms Performing Penetration Testing," defines the competence, methodology, confidentiality and reporting requirements for the firm and personnel providing penetration-testing services. Certification is issued by the Turkish Standards Institution (TSE).
Netlore Security is a penetration-testing firm certified by the TSE and conducts its tests in line with the TS 13638 methodology and reporting format, helping you meet the "certified firm" expectation of regulations such as BDDK, EPDK, TCMB and KVKK.
- TS 13638-T2 — Requirements for Personnel and Firms Performing Penetration Testing (TSE certification)
- The standard covers personnel competence, testing methodology, confidentiality and reporting requirements
- BDDK, EPDK, TCMB and public-sector regulations require or encourage testing to be performed by TSE 13638-certified firms
Who Requires a TSE 13638-Certified Firm?
Our TS 13638-Aligned Testing Approach
Standard Methodology
A structured testing methodology aligned with TS 13638, covering reconnaissance, vulnerability discovery, controlled exploitation and verification.
Certified Personnel
Tests are carried out by certified penetration testers holding the competencies defined by the standard.
Confidentiality and Data Security
Test data and findings are handled and stored in line with the standard's confidentiality requirements.
Standard Reporting
Findings are reported in TS 13638 format with an executive summary, technical detail and risk ratings.
Scope and Authorization
Test scope, targets and authorization are clarified in writing, and boundaries are kept well-defined.
Traceability and Documentation
All test steps are documented in a traceable manner, providing records for re-testing and audit.
Testing Process
Scoping and Authorization
Target systems, test type (external/internal, application) and rules of engagement are defined in writing.
Reconnaissance and Vulnerability Discovery
Vulnerabilities are identified through asset discovery, automated scanning and manual analysis.
Exploitation and Verification
Identified vulnerabilities are exploited in a controlled manner to verify real-world impact.
Reporting
Findings are reported in TS 13638 format with risk ratings and remediation recommendations.
Re-testing
A closing verification (re-test) is performed for remediated vulnerabilities.
Deliverables of a certified process
You receive an independent, auditable test file with the content that the standards call for.
Your questions
What is TSE 13638?
Is Netlore TSE 13638-certified?
Which regulations require a TSE 13638-certified firm?
Who should perform the penetration test?
What does the test cover?
How often should penetration testing be performed?
What is delivered after the test?
Penetration Testing with Our TSE 13638-Certified Team
Have the independent penetration test required by regulators performed by our TSE 13638-certified team.