March 18, 2026, 3:02 p.m.

What is the TSE 13638 Standard?

Published by the Turkish Standards Institute (TSE), the TS ISO/IEC 13638 standard defines the technical and methodological framework that companies providing penetration testing services in Turkey must comply with. This standard was created to ensure that customers receive quality and reliable penetration testing services.

Why Should You Choose a TSE-Approved Penetration Testing Company?

TSE approval certifies that a company meets the following criteria:

• Technical Competence: Test specialists possess specific certifications and experience
• Methodology: Testing processes compliant with international standards (OWASP, PTES, OSSTMM)
• Reporting Quality: Technical and managerial reports are presented to a specific standard
• Confidentiality: Customer and test data are kept secure

What Does the TSE 13638 Standard Cover?

The essential components that a penetration testing service under this standard must include are:

1. Scoping: Clear definition of systems, IP ranges, and applications to be tested
2. Reconnaissance: Gathering information about target systems
3. Vulnerability Analysis: Systematic scanning and validation of security vulnerabilities
4. Exploitation: Controlled exploitation of identified vulnerabilities
5. Reporting: Reporting of findings, risk levels, and remediation recommendations

Which Organizations Are Required to Obtain TSE-Approved Penetration Testing?

In Turkey, companies under the supervision of the following regulatory bodies are required to obtain penetration testing from TSE-approved companies:

• BDDK: Banks and financial institutions
• EPDK: Energy sector companies
• SPK: Capital market institutions
• BTK: Electronic communications sector

Nordis Global's TSE Accreditation

As Nordis Global, we are a penetration testing company approved by TSE. Additionally, with our ISO 27001, ISO 27701, and ISO 9001 certifications, we hold the industry's most comprehensive accreditation set. This enables us to provide our customers with penetration testing services that meet legal requirements and comply with international standards.

To learn more about our TSE-approved penetration testing service, please contact us.