Business protection begins with business understanding
Thanks to the development of Machine-to-Machine communications, the concept of BYOD, and the Internet of things, data productivity has grown significantly. However, each of these digital world properties has a set of cyber vulnerabilities.
We implement a risk management strategy, striking a balance between the effectiveness of our customers’ work and their need for security.
-
Collection of information on the external infrastructure of the Company
-
Search for used technologies and prioritization of external IT assets by an attacker
-
Identify vulnerabilities and configuration flaws on the most critical assets
-
Selective exploitation of vulnerabilities and configuration flaws for vulnerability verification
-
Assessment of the possibility of advancing inside the corporate network based on compromised assets
-
Assessing the possibility of compromising sensitive data based on the implemented attack vectors
-
Development of a map for implementing attack vectors based on successful penetration vectors
-
Development of a plan of necessary IS measures based on the identified shortcomings
-
Development of a report and the formation of recommendations to increase the level of security
-
Search for disclosed technologies and software versions
-
Identification of public services and assessment of their criticality
-
Search for disclosed contacts of employees and other data that can be used during a phishing attack
-
Identification of information leaks (including source codes of developed products, etc.)
-
Search for compromised accounts
-
Analysis of activity in social networks
-
Darknet monitoring for the presence of confidential information
-
Development of a report and the formation of recommendations to increase the level of security
-
Identification of deficiencies in IS settings on detected services, as well as the presence of public vulnerabilities in passive mode
-
Testing application business logic in a security context
-
Security analysis of web server IT component and verification of settings
-
Application Information Collection
-
Testing parameter processing functions
-
Testing Web Access Control and AAA mechanisms
-
Source Code Vulnerability Analysis
-
Development of a report and formation of recommendations for improving the security level of a web application
-
Testing the security of IT infrastructure components
-
Communication channel security testing
-
User device security testing / BYOD security testing
-
Analysis of the overall remote access architecture
-
Test employee awareness through phishing
