Security and compliance
Penetration testing
Want to know how well your network, server or application is protected against attackers from the internet? What could someone take from your company by plugging a laptop into the nearest socket? Do you know what an employee can do from their computer?
External infrastructure test
A test simulating an attack aimed directly at you. We use the same or similar tools a real attacker would and focus on the most common and best-known flaws. Automated output is further analysed and refined. The goal is to detect weak points, verify them and use gained access for further penetration.
Internal infrastructure test
We verify the security of the internal network from the perspective of an unauthorised attacker connected to the network and of a regular user – an employee. The goal is to find possibilities of unauthorised access to information, data and operations.
Web application test
A basic test according to OWASP Top 10 focused on the most common vulnerabilities, or a detailed test from the perspective of anonymous and authenticated users and roles according to the OWASP Testing Guide. Manual testing overcomes barriers automated tools cannot. The test can be extended with source code review.
Mobile application test
Mobile applications struggle with vulnerabilities too – data leakage, bypassing functionality. We test using a methodology based on the OWASP Mobile Security Project.
Automated test
Every computer reachable from the internet is probed daily by automated bots. We offer a similar scan simulating these attacks – with the difference that you receive the data. Critical findings are manually verified to rule out false positives.
Security and compliance
Why penetration tests matter
- Prevention of incidents and reputation loss
- Identifying flaws before they cause losses
- Tracking the security posture over time
- Optimising spending on security measures
- Input for NIS2 and Act No. 69/2018 audits
- A clear report with recommendations
Penetration testing
Frequently asked questions
Answers to what clients ask us most often.
Contact usScope, timing and rules are agreed in writing beforehand. We do not use destructive techniques and critical systems are tested outside business hours.
A report with findings ranked by severity, evidence, impact and specific remediation recommendations. After fixing we can re-verify the findings.
Other services
Security and compliance
Cybersecurity and NIS2
Audit, measures, documentation and compliance with the NIS2 directive and the Slovak Cybersecurity Act No. 69/2018.
Learn more 02
Cybersecurity manager
External cybersecurity manager for municipalities, schools and companies. Responsible person, documentation, reporting, control of measures.
Learn more 03
Information systems audit
We uncover even the smallest shortcomings that could threaten the security, stability and reliability of your systems.
Learn moreHave a project or a problem that needs solving?
Tell us what you need. Within two business days we will get back to you with a suggested next step.
