Penetration
Testing &
Red Teaming

Our Red Team has extensive experience in the simulation of various threat actors. These range from simple “script kiddie” attacks to highly complex vulnerability chaining for attacks at the “nation state” level. Close, continuous cooperation with the internal Blue Team and the implementation of impromptu crisis management exercises at InfoGuard’s Cyber Defence Centre have resulted in a unique wealth of experience for particularly complex and well-shielded environments. The attacks have already gone so far as to exploit vulnerabilities that are still unknown to the public (development of so-called zero-day exploits). This has made it possible to bypass state-of-the-art security appliances and achieve a breakthrough in high-security environments. Our individual team members have wide-ranging and deeply specialised expertise (e.g. from BlueTeam/RedTeam dual roles, forensic analyses, reverse engineering, cryptography or exploit development), producing a unique combination of offensive and defensive IT security.

This audit involves a technical review of the infrastructure. This involves verifying whether technical or configuration vulnerabilities exist that would allow an attacker to gain initial access to the internal network – or to control internal IT systems from the Internet (C2), or to steal data undetected. The test catalogue developed by InfoGuard is based on recognised security standards such as the “Center for Information Security” (CIS) benchmarks and the Microsoft Security Baselines.

We test your IoT/ICS and/or SCADA infrastructure. The strengths and vulnerabilities of the individual components are checked, the risk situation is assessed and specific measures are developed to reduce or eliminate any vulnerabilities. The audit ensures that the systems used are sufficiently secure to withstand a cyberattack.

The Active Directory is the central location for managing network resources, user objects and authorisations. Security gaps and potential vulnerabilities within the configuration can have a major impact on your cyber security and increase your susceptibility to cyberattacks. Our Active Directory Assessment is the perfect solution for identifying any security gaps and risks. The Active Directory settings in your company are fully checked for security issues and the results analysed by the designated specialists and then discussed with you in detail. You’ll receive specific optimisation suggestions and recommendations to ensure a secure AD configuration in your company.