Offensive Services

Penetration

Test

During a penetration test activity, our Red Team members use various techniques and tools to assess the resilience of a system or application against external threats. This may include analyzing possible entry points, such as software vulnerabilities, misconfigurations, weak authentication credentials, and the use of unencrypted protocols.

The penetration tester tries to exploit these vulnerabilities to evaluate the impact this could have on the organization.

The primary goal of the activity is to identify security weaknesses in your company, in order to provide you with recommendations to improve its resistance to attacks.

Red

Teaming

During a Red Teaming activity, our team precisely simulates the tactics, techniques, and procedures (TTPs) used by cyber attackers.

We offer a set of specific attack scenarios tailored to the client’s environment, which we develop after thorough reconnaissance, also leveraging our Cyber Threat Intelligence Platform SATAYO.

The main goal of the activity is to carry out a true Adversary Simulation, allowing you to evaluate your current ability to detect and respond to attacks, whether they are directed at your infrastructure or your organization’s employees.

Social

Engineering

We can carry out a range of attack actions based on different techniques.

We build highly customised phishing campaigns, with the registration of look-alike domains and the creation of original themes and texts. We handle baiting attacks to assess the awareness of your employees. We use lockpicking techniques to verify physical access points. We implement impersonation scenarios, onsite and online, with which we test the possibility of building trusting relationships with people within your company.

The main objective of the activity is to assess the human factor of your company and its ability to respond effectively to attacks.

Password

Audit

We all know that passwords should meet minimum length requirements and include special characters, but how effective are they really?

A password audit is a service designed to evaluate the security of employee passwords within your company. It raises awareness and strengthens protection for your data and resources.