Professional penetration testing

A penetration test – pentest for short – is a in-depth examination of software, hardware or a complete IT infrastructure for weak points. These can serve as gateways for criminal hackers to access sensitive data such as trade secrets or to cause targeted damage through manipulation. The best protection against this is to take the attacker’s perspective. For this reason, the techniques of real attackers are used in a penetration test – without causing damage of course.

Every exam is different. Depending on the scope, complexity and approach, the implementation time varies. That’s why our experienced inspectors work with you to develop an economically viable inspection scenario – perfectly tailored to your requirements. Request your non-binding offer now.

Our experts examine your IT infrastructure or product from the perspective of a real attacker and also apply their techniques. In doing so, they uncover vulnerabilities that would otherwise remain hidden, helping you strengthen your resilience against cyberattacks.

IT architectures are primarily designed to function, while security is a secondary priority. Too often, the standard configuration specified by manufacturers is relied on, which is usually anything but secure. These problems are often only discovered after the damage has already occurred. A penetration reveals them to you before a real attacker takes the chance.

Attackers typically take weeks or months to prepare before the actual attack takes place. The whitebox approach deliberately skips this preparation phase by reviewing source code, documentation, network diagrams, and so on. This procedure is suitable for obtaining as much information as possible about the security status of the environment or application in as short a time as possible. This saves you time and money.

We like to grope in the dark so you don’t have to! In contrast to the whitebox approach, the auditors have as little information as possible at their disposal. This enables a realistic estimate of how long it would take an attacker to extract data or cause damage. This approach is useful to evaluate the effectiveness of the protective measures in an already secured environment under real conditions. The disadvantage here: the time of conduct is significantly longer than in a whitebox procedure.

Black + White = Grey. The greybox penetration test combines the advantages of blackbox and whitebox approaches. Depending on the objective of the test, any gradation of the level of information is possible. Therefore, our pentesters recommend a dynamic approach: first, only general information is provided. Specific information is only requested on a case-by-case basis during the course of the audits. This makes it possible to create a scenario that is as realistic as possible. This is easier on the wallet than the pure black box approach. Keyword: cost efficiency.

Security appliances and endpoint protection are important components of cyber defense – that is undeniable. The penetration test evaluates the effectiveness of these and other protective measures in the overall context of the infrastructure in order to sharpen them further. Better be safe than sorry.

Our motto: Right Tool for the Job. A list of tools would therefore make little sense at this point, because: it is not the camera that makes the photo, but the photographer. Our penetration testers use a variety of tools and scripts, from open source tools to homegrown zero-day exploits. Secret technology does not exist. This gives you deep insight into the attacker’s world at any time.