Offensive Services

Penetration

Test

During a penetration test, our ethical hackers use various techniques and tools to simulate attacks that a potential attacker could execute. This may include analyzing possible entry points, such as software vulnerabilities, faulty configurations, weak passwords, or physical weaknesses.

The penetration tester attempts to exploit these vulnerabilities to gain unauthorized access to the system, retrieve sensitive data, or perform unauthorized actions.

The main goal of the test is to identify weaknesses in your system’s security and provide you with recommendations to improve its resilience against attacks.

Red

Teaming

During a Red Teaming activity, our team simulates exactly the tactics, techniques and procedures (TTP) used by cyber attackers.

We propose a set of specific attack scenarios, tailored to the client’s circumstances, which we realise after a thorough reconnaissance activity, carried out also thanks to the use of our Cyber Threat Intelligence Platform SATAYO.

The main objective of the activity is to carry out a real Adversary Simulation, which enables you to assess your current capacity for detecting and responding to attacks, whether they are aimed at the infrastructure or the employees of your organisation.

Social

Engineering

We can carry out a range of attack actions based on different techniques.

We build highly customised phishing campaigns, with the registration of look-alike domains and the creation of original themes and texts. We handle baiting attacks to assess the awareness of your employees. We use lockpicking techniques to verify physical access points. We implement impersonation scenarios, onsite and online, with which we test the possibility of building trusting relationships with people within your company.

The main objective of the activity is to assess the human factor of your company and its ability to respond effectively to attacks.

Password

Audit

It is well known that our passwords must have a minimum length and include special characters, but it is sometimes difficult to really know how effective they are.

The password audit is a service that aims to assess the security of passwords used by employees in your company, raise awareness, and improve the protection of data and resources.