References

Workshop to identify general security problems in IT and, if necessary, make recommendations for the solution of the security gaps. The goal was to get a second opinion on the current security measures.

Security audit of a web application for inventorying tools and the associated mobile application and configuration review of the associated cloud environment

External security scan of multiple systems. Penetration test of multiple web, mobile, and windows applications together with the client at their office. The focus was on know-how transfer.

Audit of a function for migration between two major releases of a mobile app for Android and iOS

Security review of the ruleset of a perimeter and a VPN firewall

Review of the provided concept for the integration of Windows Hello for Business as well as recommendations for the usage of passwords, PIN and biometrics regarding length, complexity and expiration frequency

Technical security assessment of an IoT mobile application in the construction industry

Security configuration review of an Industrial IoT platform

Configuration review of a data lake in the Amazon cloud

Web application penetration test and mobile application penetration test of self-developed applications for web browsers and Android, which support sales staff during on-site customer meetings

Web application penetration test of a website for managing orders

Web application penetration test of two cloud extensions for customer relations management

Automated scan of internal networks as well as externally accessible servers. Depending on the results of the scans, individual systems were checked manually. Social engineering was also carried out.

Configuration review of Azure AD and AWS SSO integration

Manual web application penetration test of a contact form with focus on the protection of customer data

Windows client and API penetration test with a focus on authorization, sensitive data leakage, and local data storage

Penetration test of an API

Web application penetration test of an internal tool management application and configuration review of the associated cloud environment

Security audit of a web application for the inventory of tools and its associated mobile application and interfaces

Penetration test of an API