Services

At the very least, a general security assessment includes an analysis of firewall configurations, an analysis of standard desktop and server implementations, and other basic security related items regarding an environment.

. A network penetration test will have us target your environment to see if we can gain access. In most cases, a penetration test is not recommended unless you are a fairly mature security environment.

Whether you are bound to HIPAA, PCI, NERC/FERC, GLBA, or any other standard, we can help get you compliant. We appreciate compliance and we really appreciate is protecting data.

We can even perform a passive analysis and reconnaissance to find publicly accessible data that is readily available and then highlight areas that may be problematic in a directed attack.

Application security involves checking the actual application for potential flaws, not just the host operating system. Our testing can also include code auditing in cases where we have a thorough familiarity with the programming language in use.

We can also provide ongoing vulnerability scanning for customers who need assistance maintaining a vulnerability scanning engine, interpreting the results, or remediating the threats.

That is where a virtual CISO (vCISO) comes in. A vCISO works with your IT staff to get security programs off the ground and ingrained in the environment.

It relies on your staff to implement the ongoing changes though. Providing your organization with a direction on their security program is a small subset of the role a virtual CISO might help your organization with

We have implemented thousands of security products in thousands of environments, however, there is always the possibility we don't have experience with product XYZ. Here's a little tip and it goes back to our policy about honesty... we will tell you upfront.