The rapid growth of information technology has a positive impact in every aspect of life, one of it is the internet. We can see from the increasing number of website users for government, education, organization and even private matters. With easy access to it we can notice that some government institutes build website with low security. Website is an information service that is most accessed by users that is connected to internet. Universitas Muhammadiyah Purwokerto (UMP), one of education institution, uses website as a media to deliver wide range and unlimited informations. It is equal to the number of website usage and is followed by the risk of being hacked. Therefore, important doing a regular self-pentest to test the vulnerabillities of the sim-bka.ump.ac.id website. This test carries out four sessions: Information Gathering, Network Mapping, Vulnerability Identification, and Penetration Testing.