References

Security scan of publicy available network segments of a financial services company and a detailed audit of an application for the management of cash flows in the supply chain

Web application penetration test of an administration and control platform for IoT-devices

Web application penetration test of a communication platform for an insurance provider

Web Application Penetration Test of a password change tool that allows users without an Active Directory connection to change their password

Audit of a newly implemented interface and its associated security concept with regard to possible unauthorized access to data of other users as well as to vulnerabilities in general

Unauthenticated testing of externally accessible systems using security scans and manual testing on selected systems

Web application penetration test and partial code review of a platform with sensitive data

Web application penetration test of a small web application to order and manage services

A technical test of a security operation center (SOC) to determine the detection capabilities and processes. To do this, various attacks were simulated and the detected activities analysed. Additionally a malware outbreak was simulated and the reaction of the SOC recorded

Penetration test of two web services used to manage IoT devices

Security scan of internal network segments and external available network segments of a retail company. Additionally a shop site was also scanned for security vulnerabilities

Two-part security audit: testing a network of self-hosted systems using automated scans with isolated manual checks; moreover, on several externally operated systems, certain web applications were in scope of additional detailed penetration testing

Web application penetration test of a platform to file requests

Web application penetration test of a backend solution for banks

Technical security assessment of a cantonal data register

Windows 10 and Windows 7 client audit with focus on malware prevention

Conducting several combined technical and conceptual audits (incl. advanced mail test, Windows 10 client audit, ISO 27002 gap analysis, penetration test and configuration review as well as internal and external security scan) to assess the overall information security of the organisaiton

Security audit of a communication system for customers and their account managers

Penetration Tests of a website to organize events and concerts

Workshop regarding the implementation of an ISMS (ISO27001/2) and information classification. Preparation of drafts for acceptable use policy and classification framework