Site map

Posts by category

• Category: Blog
  • Obtain secrets from different sources
  • Git secret leaks
  • Bash/zsh scripts. Part 3
  • Secure secrets management in Docker containers. Part 2
  • Secure secrets management in Docker containers. Part 1
  • Insecure deserialization
  • Input processing vulnerabilities
  • Spring4Shell as a class injection example
  • JNDI injection
  • JNDI injection. Log4Shell case study
  • JNDI injection. JDBC
  • Avoiding injection vulnerabilities
  • Avoiding XSS injection vulnerabilities
  • Avoiding OS command injection
  • Avoiding Templates injection
  • Avoiding other injections
  • Category: How to
    • The future of PCI DSS: What would I expect from version 5.0
    • Custom Approaches for Different Maturity Levels in Cybersecurity
    • DORA and PCI DSS
    • Focused Red Teaming
    • The Evolution of Security Testing: Navigating the DORA Framework for the Financial Sector
    • Myths and Realities of Code Security Review
    • How to Choose the Right Penetration Testing for Your Business?
  • Category: IT Audits
    • Applying Henry Ford’s Management Principles to software development
  • Category: Secure coding
    • Category: Injection vulnerabilities
    • Category: Input processing vulnerabilities
    • Category: Secure secret management
• Category: Case Studies
  • PCI DSS segmentation testing case
  • Social engineering
  • Client-Bank application compromise
  • Internal Adversary Simulation Case
  • Azure Active Directory compromise
  • EDR product’s effectiveness evaluation
  • Assumed Breach and Privilege Escalation Case
  • Payment processing API penetration testing
  • Internal Adversary Simulation case study
  • Improve and optimize the testing process
  • Testing Management
  • Automated testing
  • Category: Case studies. QA Management
  • Category: Case studies. Red Teaming
    • Application Threat Modelling and Phishing Attack Chain Case
    • Targeted Phishing on Cloud Services Provider Admin infrastructure Case
    • Network Compromise and Cloud Infrastructure Exposure Case
  • Category: Case studies. Security
  • Category: Case studies. Technical Audit
    • Cloud Infrastructure Audit and Performance testing case
    • Case Study: Strengthening Compliance with NIST CSF 2.0
    • The New Way of Working
  • Category: Case studies. VAPT
• Category: Cloud Services
  • Cloud infrastructure initial analysis
  • Cloud infrastructure scalability analysis
  • Cloud infrastructure cost optimization
  • Disaster recovery
  • Centralized Logs Aggregation
  • Migrating To Kubernetes
  • Cloud Migration (AWS, GCP, AZURE)
  • Configuration Management And Versioning
  • Infrastructure As a Code
• Category: Consulting
  • Secure SDLC Consulting
  • Cybersecurity Consulting
  • Security Audit
  • Security Awareness
  • Security Audit: Approach and Process
  • Getting Started with Cybersecurity for Your Company: A Short Guide
  • Category: Technical audit
  • Category: Test Consultancy
• Category: Cybersecurity Services
  • Security Code Review
  • Security Assessment of the Architecture
  • Developer/DevOps adversary simulation
  • Infrastructure penetration testing
  • Social engineering assessments
  • Adversary simulation
  • Category: Penetration testing
    • Internal Infrastructure Penetration Test
    • External Infrastructure Penetration Test
    • Cybersecurity Compromise
    • Vulnerability Assessment
    • OSINT – Open Source Intelligence
    • Vulnerabilities Scanning
    • DORA — Compliance Solutions for financial institutions
    • TIBER-EU Framework
    • Threat Intelligence
    • Mobile Application Penetration Testing
    • API Penetration Testing
    • Web Application Penetration Testing
  • Category: Red Teaming
    • Spear Phishing
    • Tabletop Exercise
    • Red Teaming
  • Category: Security audit services
    • CISO as a Service
    • Secure Software Development Life Cycle (Secure SDLC)
  • Category: Social Engineering
    • Category: Phishing
      • Phishing
      • Social Engineering
      • Offencive Security
• Category: DevOps Practice
• Category: Managed Testing Services
  • Automated Testing setup in the project
  • Functional testing
  • Validating Big data workflows
  • Performance testing
• Category: Professional services
  • Partnership
  • Application penetration testing
• Category: Services
  • Price
• Category: Services Pages
  • ISO 27001
  • Secure Software Development Life Cycle (Secure SDLC)
  • ASV Scanning
  • Cybersecurity Services
  • Performance
• Category: Software Quality Assurance
  • CI/CD Implementation and Testing
  • Test Data Management
  • Test Environments Management
  • Test project assessment
• Category: Software Testing
  • Policy statement on human rights
  • Request a White Paper
  • Anti-Slavery and Anti-Human Trafficking Statement
  • Automated testing challenges
• Category: Training
  • Category: Cyber awareness
    • Red Team—a simulated cyber attack on your organisation
    • Blog
    • Secure IT-Operations training
    • Security Awareness Training request
    • Secure coding training
    • Security code review training
• Category: Vacancies
  • Web/Mobile/API applications Penetration Tester
  • Offensive Cybersecurity specialist / Red Team operator
  • Internal/External Infrastructure Penetration Tester