Security Testing
Whether your protection works only shows when it is tested. We examine your systems and networks from an attacker's point of view and deliver a clear report with prioritised actions.
Vulnerability scans
Using established tools, we determine which services are reachable and which known vulnerabilities they have. Repeated regularly, the scans make changes to your attack surface visible.
- External attack surface: What of your IT is visible from the internet? Open ports, services, certificates and outdated software versions.
- Internal networks: Servers, clients and network devices in the office network, including missing updates and insecure protocols.
- Recurring checks: At fixed intervals on request, so new gaps are not discovered only at the next incident.
Configuration review
Many gaps are caused not by missing updates but by settings. We review your configuration against BSI and CIS recommendations.
Servers
Hardening of Linux and Windows servers, running services, logging.
Firewall & VPN
Rule set, external exposure and protection of remote access.
Accounts & permissions
Administrator rights, orphaned accounts and password policies.
Process & results
Security tests touch running systems. That is why we follow a fixed process agreed with you.
- Written order: Testing only with your approval, within the agreed scope and time window and with named contacts.
- Careful execution: We test production systems with care, risky steps only after explicit agreement.
- Report with actions: All findings rated by severity, with concrete recommendations and a management summary.
- Retest: After remediation we test again and confirm that the gaps are closed.
How resilient is your IT?
We discuss scope and approach with you, free of charge and without obligation.