What we do

As a part of penetration testing, we exploit known and unknown vulnerabilities of specific resources, such as internet and mobile applications, infrastructure resources exposed to the Internet, and more. Usually we define the purpose of the tests at the beginning of the process but it can also be a subject of the recognition phase we carry out. Tests can be delivered as a black box, gray box or white box scenario.

We help our customers to develop cybersecurity strategy and processes for monitoring and incidents response. We support them in the process of implementation of specific security systems:

• We develop SIEM playbooks adapted to the business specifics of monitored IT environments.
• We adapt workflows in dedicated security incident management tools.
• We create appropriate integration elements for monitoring custom business applications and industrial automation systems.

We deliver security trainings at various levels of advancement and for different target groups (programmers, analysts, sales representatives). As required by the group, we focus on issues specific to their daily tasks, e.g. programmers, knowing the security breach methods could create properly secured applications, which would decrease the number of vulnerabilities identified in the last stage of the application development cycle.