Penetration Test

Application penetration test, code review, reverse engineering, ethical hacking and APT test against cyber threats

Proactively protect your web shop, internet banking platform, mobile app, ICS (SCADA / DCS), IoT device or IT infrastructure via penetration test, code review, reverse engineering or APT test by our certified penetration testers and security researchers.

ISO 27001 Security Audit

ISO-compliant assessment of your information security landscape

Analyze and benchmark your information security level based on international standards (ISO 27001, ISO 27002, SANS 20, IEC 62443, NERC CIP, etc.) to plan your IT budget for security mitigation measures.

Digital Forensics & Incident Response

Fast, professional reaction to cyber attacks and unwanted digital activities plus court-proof investigation

Respond effectively to malware infection, hacker attack, fraud, data theft and other criminal or unwanted digital activities with the support of our certified DFIR experts.

Security consulting

Security training

Security Officer Services

Oneconsult group is your renowned Swiss cyber security services partner since 2003 with offices in Switzerland and Germany and 1600+ completed security projects worldwide. Get expert advice from an owner-managed and vendor-independent consultancy with 40+ highly qualified cyber security experts, including certified ethical hackers / penetration testers (OPST, OPSA, OSCP, OSCE, GXPN), digital forensics specialists (GCFA, GCFE, GREM, GNFA), ISO security auditors (ISO 27001 Lead Auditor, ISO 27005 Risk Manager, ISO 27035 Incident Manager) and dedicated IT security researchers to solve even your most demanding information security challenges. Together we address your external and internal threats such as malware infections, hacker attacks and APT as well as digital fraud and data leakage with core services like penetration tests / ethical hacking, real-life APT tests and ISO 27001 security audits. In case of emergency, Oneconsult’s Digital Forensics & Incident Response (DFIR) team supports you with around-the-clock expert assistance (24 h x 365 days).

Events

21-Nov-19

4-12-2019: Breakfast Talk - Schwachstelle Mensch: Wie Sie sich gegen Cyber-Angriffe schützen

Talk with Live Hacking

When & Where:
4.12.2019, Zühlke – PostParc Hochhaus
Bogenschützenstrasse 9A, 3008 Bern

Participation fee:
free of charge

Registration:
E-Mail to nadine.huwiler@zuehlke.com

01-Nov-19

7+8-11-2019: Visit us at #BLACKALPS19

Oneconsult AG is gold sponsor of the cyber security conference #BLACKALPS19, which takes place on November 7th and 8th, 2019 in Yverdon-les-Bains. Visit us at the Oneconsult booth and learn more about our customized core services: Penetration Tests / Ethical Hacking (incl. APT tests under real conditions), ISO 27001 Security Audits and Digital Forensics & Incident Response (24 h x 365 days).

News & Advisories

18-Dec-19

Beyond OWASP Top 10 – Lesser known vulnerabilities in web applications and APIs

Even if fundamental security risks such as cross-site scripting (XSS) or SQL injections are mitigated during application development, web applications and interfaces are susceptible to vulnerabilities.

In Java aktuell 01/2020, Senior Penetration Tester & Security Consultant Frank Ully writes about lesser known types of vulnerabilties in web applications and APIs (PDF; in German).

02-Oct-19

Dos and Don’ts der Incident-Response

by Christoph Baumgartner & Tobias Ellenberger

Unfortunately, security incidents cannot always be avoided. To make sure you don’t get caught in the cold, this article published in the German magazine <kes> gives you practical tips: https://www.kes.info/aktuelles/kes/incident-response/

Pen Tester's Diary

13-Aug-19

(In)secure passwords – Part 2: Results of a password quality audit

by Sandro Affentranger

This is the second article on passwords. Recommendations for strong passwords have hardly changed over the years. Only recently it has become clear that the recommendations made so far have created certain patterns that can be exploited by attackers – this has led to a paradigm shift in password policies. This article presents the results of a Password Quality Audit carried out by Oneconsult at an international industrial company. [read the German article]

22-Jul-19

OWASP IoT Top 10 – Part 2

by Jakob Kunzmann

This article deals with the OWASP Top 10 on the Internet of Things, a list of the top ten security risks in the IoT area, published by the Open Web Application Security Project (OWASP).

Read the full german article here: https://www.oneconsult.com/de/owasp-iot-top-10-teil-2/.

Our customers value our expertise and vast project experience of over

Penetration test projects, over 900 of which OSSTMM-compliant

Application penetration test projects of banking solutions, online shops, mobile apps, ICS (SCADA/DCS), IoT devices, ERP and CRM solutions, CMS, VoIP systems, etc.

Security audits, e.g. according to ISO 27001, ISO 27002, industry specific guidelines (ISO 27015, 27019, 27799, etc.) or SANS Critical Security Controls

Digital Forensics & Incident Response (DFIR) projects

Methods and Standards

Our approach is customized to meet our clients’ specific needs as well as based on «best practice». In addition to our own methods, we also rely on industry-proven standards.

OSSTMM – Open Source Security Testing Methodology Manual

OWASP – Open Web Application Security Project

ISO 27001 – Information Security Management System (ISMS)

Holding

Oneconsult International AG
Schuetzenstrasse 1
8800 Thalwil
Switzerland

+41 43 377 22 22
info@oneconsult.com

Switzerland

Headquarters
Oneconsult AG
Schuetzenstrasse 1
8800 Thalwil
Switzerland

+41 43 377 22 22
info@oneconsult.com

Oneconsult AG
Baerenplatz 7
3011 Bern
Switzerland

+41 31 327 15 15
info@oneconsult.com

Germany

Oneconsult Deutschland GmbH
Agnes-Pockels-Bogen 1
80992 Munich
Germany

+49 89 248820 600
info@oneconsult.com