References

Penetration test of a notification API

Security architecture review of the general network setup and evaluation support for a network monitoring solution

Risk analysis and technical assessment of a proposed technical security measure to protect a business critical Oracle database against current threats

Security audit of specific API endpoints

Penetration test of two APIs

Penetration test of the external part of an offer communication

Review of the architecture and configuration of a VPN solution and penetration test of the backends

Intensive audit of an asset management portal: The scope of the audit included the web application, the associated Android application and the connected backends. The tests were performed both authenticated and unauthenticated

Comprehensive IT security audit including electrical and physical social engineering. The network infrastructure was examined by means of an external and internal security scan, a physical inspection of a site was carried out and a phishing awareness campaign was conducted across the entire workforce

Security design and architecture review of a network and penetration test of some external gateways

Application penetration test of a webservice to sign documents online

Security statement for the use of end-of-life software

Penetration test of a web application for resource management

Penetration test of a web application that is used to plan construction projects

Security audit of a web shop and associated payment function

Penetration test of two web services used to manage IoT devices

Windows 10 and Windows 7 client audit with focus on malware prevention

Conducting several combined technical and conceptual audits (incl. advanced mail test, Windows 10 client audit, ISO 27002 gap analysis, penetration test and configuration review as well as internal and external security scan) to assess the overall information security of the organisaiton

Internal and external vulnerability scan of the company's entire IT infrastructure

Audit of the entire IT infrastructure; penetration test of the externally and internally accessible systems, audit of the WLAN environment and awareness tests as well as audit of the mail server