Threat-driven simulation of real-world cyber attack. The scenarios may include, but are not limited to, simulations of external or internal attackers, with or without access, targeting various system components (such as internal/external infrastructure and applications) or individuals through social engineering tactics (like spear phishing or physical intrusion) to achieve a predetermined goal.

Our team is experienced in conducting Thread-Led Penetration Testing for TIBER EU or DORA TLPT based tests.

Testing and evaluation of self-developed or off-the-shelf electronics, IoT, automotive or healthcare devices. Typical projects include:

• ●
  Circuit level testing (hardware hacking)
• ●
  Firmware level assessment
• ●
  Bus and interface testing, including internal and external communication channels
• ●
  Application and backend testing 

Infrastructure level testing of external perimeters, entire internal networks, including wireless systems.

This also includes testing of various cloud-based setups, cloud-only or hybrid solutions.

These tests can also focus on specific infrastructure elements, like remote access solutions (e.g., breakout tests in VDI environments), ATMs or HMIs in highly sensitive environments.

We cover the security needs of complex industrial environments, from the shop floor to the product and its backend environment as well. The range of tests includes, but is not limited to:

• ●
  Penetration testing on application and network-level
• ●
  Shop floor infrastructure security assessment
• ●
  Network segmentation and configuration review
• ●
  Hardware-level security testing of Industrial IoT (IIoT) devices
• ●
  Simulation of ransomware and APT attacks 

We assess the security configuration of an SAP deployment, including cryptographic practices and authorization structures. We also identify remote connections and interfaces, evaluating their security. Additionally, we conduct automated and semi-automated tests on custom ABAP code to detect vulnerabilities. The results from these steps will be used to create attack scenarios, which will be discussed and approved by the client before execution. The outcome will provide a comprehensive insight into the overall security posture of the SAP system.