Penetration Testing

Social engineering assessments

Social engineering is an attack that requires human interaction, persuading employees of the target company to act, such as opening… Read more

The Evolution of Security Testing: Navigating the DORA Framework for the Financial Sector

The DORA Framework introduces stringent guidelines for the financial sector's cybersecurity. This evolution mandates advanced security testing methodologies beyond traditional… Read more

Application penetration testing

For all penetration tests, our team collects relevant information about the scope, develops an attack surface, and begins an extensive… Read more

DORA and PCI DSS

Article will help to introduce DORA requirements to those who have years of cybersecurity experience but are very new to… Read more

Infrastructure penetration testing

Infrastructure penetration testing focuses on the security of both the application environment and the supporting infrastructure, including third-party services and… Read more

The future of PCI DSS: What would I expect from version 5.0

Exploring PCI DSS version 5.0: thoughts on potential changes like expanding applicability, risk analysis, service provider categories, and aligning with… Read more

Red Teaming

Discovering potential compromise paths. Test threat response, detection, and investigation processes. Read more

Social engineering

During this social engineering engagement, it was possible to achieve persistent internal access, exfiltrate confidential and personal information, and compromise… Read more

Payment processing API penetration testing

Tenendo specialists discovered an unattended staging environment and leveraged its vulnerabilities for sensitive information disclosure. This information was later reused… Read more

Client-Bank application compromise

This case is a very good example why manual penetration tests are valuable - the team achieved compromise without administrator… Read more

Internal Adversary Simulation case study

Do you want to know how your organisation will fare against an internal attack? Look no further than Tenendo's Internal… Read more

PCI DSS segmentation testing case

The team created several hardware connect-back appliances and used it in a PCI DSS segmentation testing. Read more