Cyber Security
Penetration Testing: we assess your (mobile) application or infrastructure for vulnerabilities and provide recommendations on how to mitigate the discovered findings. The assessment can be approached from a black-, grey- or white-box perspective. After the assessment, we provide you with a detailed penetration test report along with a management summary report that you can share with any third parties. Cloud Security: we analyze your assets that runs on public cloud infrastructure by verifying any relevant configurations and policies. You will receive a detailed report containing our findings along with recommendations on how to further improve the security of your public assets. User Awareness: we educate employees by providing in-depth user awareness trainings and combine those trainings with regular simulated phishing campaigns. We strive to make our trainings meaningful, interesting and hands-on. Our regular phishing exercises vary between easy-to-spot and very realistic scenarios and provide the user afterwards with concise to-the-point information on improvements. Secure Coding: we review the source code of your application to verify if secure coding best practices are adhered and attempt to spot any issues. Additionally, we provide secure coding trainings to educate developers. We discuss a broad range of vulnerabilities, how they can occur, their severity and how they are mitigated through a hands-on training. Note that a secure coding review is not equal to a penetration test.