Pentest before go-live
New applications, interfaces or infrastructure are tested before they go into production — or after major changes.
Service 03
Simulating attacks before someone else does.
From ISO 27001 security audits to full red-team engagements. Web, infrastructure, social engineering, physical access — we cover the full spectrum of modern threat scenarios.
A scanner finds vulnerabilities. An attacker finds a way in.
Automated scans reveal known gaps. Real attackers combine technical weaknesses with human error and physical access. Our penetration tests and red-team engagements think the same way — and show how far an attack would really get.
The result isn’t a pile of scan output but a prioritised report: what is critical, what can wait and how to fix it — for engineering and as a summary for management.
Typical engagements
When you need us.
Red-team exercise
A realistic attack across all layers: technology, social engineering and physical access, coordinated with only a few insiders.
Preparing for ISO 27001
A security audit that shows where you stand before certification and what needs to be done.
Awareness across the organisation
Phishing simulations and training that make staff and management aware of real attack patterns.
Scope
What we actually do.
- Web and API penetration tests
- Infrastructure and network pentests
- Red teaming incl. social engineering and physical access
- OT/IT segmentation review
- Security audits according to ISO 27001
- Phishing simulations and awareness training
Process
How we work.
-
Scoping
Objectives, systems, rules of engagement and time windows are agreed in writing.
-
Testing
The attack follows the agreed scenario and is documented throughout. Critical findings are reported immediately.
-
Report
Prioritised vulnerabilities with concrete recommendations and a management summary.
-
Retest
After remediation we verify that the gaps are actually closed.
From practice
A glimpse of our work.
Anonymised in agreement with our clients. Details are shared on request and under confidentiality.
Red-team engagement at a critical-infrastructure operator
Full-scope penetration test including social engineering, physical intrusion and OT/IT segmentation. Identification of weaknesses in network architecture and operational processes. A NIS-2-compliant action list and awareness programme for operations and commercial-technical teams.
Details on request
Your contacts
Who handles your case.
Cyber Security Consultant
Peter Echer, OSCP
- Offensive Security Certified Professional
- Penetration testing / red team
Let’s talk about your case.
The initial consultation takes about 30 minutes and is free and confidential. For acute incidents, please mark your request as urgent.