Security

Vulnerability Assessment / Penetration Test / Compliance Audit

• Vulnerability Assessment using proprietary and opensource tools to highlight possible vulnerabilities in IT systems.
• Penetration Test with an international group of CEH, OSCP OSSMMT-certified penetration testers to emulate the malicious behaviour of attackers in Black Box, White Box, Grey Box modalities.
• Consulting services for procedure verification, assessed in accordance with the main standards and best practices.
• Active and passive compliance audits with analysis and supervision of configuration and architectural statuses based on fundamental standards, such as SOX, ISO27001, PCI, GDPR.

Security Code Review

Our experts perform Security Code Reviews in two ways:

• Dynamic analysis – following result validation by the client, Code Reviewers release a report of OWASP non-complying misconfigurations or code sections.
• Static analysis – through Appscan/Application Inspector/Microfocus Fortify on PHP, JAVA, C, C# codes followed by Patch Develop report creation.

Security Application Developer

Our team of experts is specialised in anti-ransomware and anti-malware software development in the military and institutional fields and in the development of web applications in the area of security.

SOC Service

We offer Security Operation Center services with the following Analysis levels:

• First-level analysts – Monitoring, Incident Management and Front End.
• Second-level analysts – In close collaboration with First-level analysts, they carry out malware analysis and countermeasure application activity analysis to block attacker IP addresses.

OSINT Investigations – Open Source Intelligence

We carry out OSINT investigation activities following security incidents relating to institutional and military entities. Our team of OSINT analysts operates using proprietary and opensource tools. Thanks to the OSINT Report, the client can have a full and detailed overview of the tests carried out and validated.

Digital Forensic Investigation

Our technical experts are specialised in corporate security incident investigations. These activities are carried out in two ways:

• Active: through the use of proprietary tools supported by forensic team analysis.
• Passive: through open source tools.

Malware Analysis

We analyse malicious Payload following security incidents regarding institutional and military entities, developing a deep understanding of tools and tactics used by attackers and proactively adopting prevention strategies. The client receives a final report to extrapolate the IOC (Indicators of compromise) to apply in its infrastructure with Block countermeasures.