Over 400 organizations (including several Fortune Global 500 companies) in Europe and overseas and across all industries trust our vendor- and product-independent cyber security services.

For reasons of discretion, we do not list the names of our clients. However, we will be pleased to provide references and letters of recommendation following consultation with the organizations concerned.

Due to the increased sensitivity we do not state or list here any references of the 200+ projects in the fields of digital forensic examinations and expert’s reports.

The majority of our projects since 2003 is listed in the overview, which includes IT forensics projects in the context of company security trainings and concepts.

2020

Cooling System Manufacturer

Internal security scan and ISO audit

Switzerland

Cantonal Hospital

Technical security audit of the IT infrastructure, including a vulnerability scan of the internal and external infrastructure as well as an audit of a Windows 10 client. Additionally, reviews of the mail and WLAN infrastructure, the internet proxy and the Active Directory.

Switzerland

Cantonal Bank

Concept review and implementation review of an iOS and an Android application as well as the corresponding backend infrastructure

Switzerland

Bank

Review of a SOC/CSIRT concept and use cases to prepare a SOC evaluation

Switzerland

Mechanical Engineering Group

Security check of the company IT by means of vulnerability scans from external over the internet and from internal in the server network, as well as an audit of the processes according to ISO 27002

Switzerland

Marketing Group

ISO 27002 security audit; analysis of the security level by means of a questionnaire tailored to customer needs, verification by means of an interview and document review; bespoke suggestions for improvements on information security incl. risk-based and prioritized measures

International

Software Developer

Conceptual security assessment according to ISO 27002

International

Tool Manufacturer

Intensive audit of an asset management portal: The scope of the audit included the web application, the associated Android application and the connected backends. The tests were performed both authenticated and unauthenticated

International

2019

Fragrance Manufacturer

Conducting several combined technical and conceptual audits (incl. advanced mail test, Windows 10 client audit, ISO 27002 gap analysis, penetration test and configuration review as well as internal and external security scan) to assess the overall information security of the organisaiton

International

Cantonal Administration

Conduct workshops for an information security strategy based on existing documentation and concepts. Subsequent drafting of the information security strategy

Switzerland

Manufacturer of Injection Systems

ISO 27002 security audit; analysis of the security level by means of a questionnaire tailored to customer needs, verification by means of an interview and document review; bespoke suggestions for improvements on information security incl. risk-based and prioritized measures

Switzerland

Bank

Review of the concept and the configuration of an Airlock IAM platform

Switzerland

Hospital Group

ISO 27002 security audit; analysis of the security level by means of a questionnaire focused on access security, verification by means of an interview and document review; bespoke suggestions for improvements on information security

Switzerland

Logistics and Pharmaceutical Distribution

Technical security audit of the entire IT infrastructure: testing of the physical security of the main locations as well as in selected branch offices, penetration test of domains accessible from outside, conceptual and technical tests of security-relevant components (including firewall, VPN access, proxy server, mail server, network zoning), vulnerability scan of the internal IT infrastructure, establishment of a continuous data breach alert ISO 27002 Security Audit; survey of the security level of 5 organizations by means of a questionnaire adapted to the customer's wishes, verification by means of an interview and document review; tailor-made suggestions for improvement in information security including risk-based, prioritized measures and an overview of the entire organization

Switzerland

Insurance Company

Creation of an IT acceptable use policy for employees and a minimum standard for system authorization concepts

Switzerland

Retail Group

Security audit of an authentication process

Switzerland

IT Service Provider

Comprehensive audit of the active directory environment dedicated to their customers. The environment was audited with a penetration test of the Citrix systems from the point of view of a customer and a conceptual review of the domain controllers and group policy objects

Switzerland

Bank

Audit of a partner company providing a wealth management application for clients

Switzerland

Power Supply Company

Audit of a workflow B2C implementation

Switzerland

Bank

Conceptual and technical audit of a hardened browsing infrastructure

Liechtenstein

page  1  of  8