Completed projects in IT security

We tested an RPA software for a customer originating from Germany but now operating globally. The software is a complex platform based on ASP.Net, consisting of multiple sub-platforms that can be distributed individually or as a package. The complexity of the software and the multitude of possible configurations made the test a particular challenge. During two penetration tests, several vulnerabilities - including 2 critical ones - were found and resolved.

Throughout the penetration test (which was conducted on a demo environment), we communicated important findings directly with the technical teams via the "short" route through Slack, so that the production systems could be protected in parallel.

A German car manufacturer commissioned us to analyze the state of the external attack surface using Argos. Within a period of a few days, hundreds of vulnerabilities, misconfigurations, and obvious security gaps were found in hundreds of domains and thousands of subdomains. The focus was on severe and critical security vulnerabilities. The company particularly wanted to know about the state of Shadow IT. DSecured received no further information - apart from the company name - and had to proceed like a real attacker.

Argos external attack surface management plays a special role in this type of deployment, as it can provide the relevant data within a few hours. It then monitors the entire perimeter - the company quickly realized how important continuous monitoring is.

As part of a long-term collaboration, we were able to conduct penetration tests against the systems of a large publishing house over several months. The publisher opted for our Pentest as a Service offering, as it was important for the company that tests could be conducted regularly and without great effort. With the help of Argos, we were able to quickly identify changes to the publisher's systems and respond accordingly.

With each significant change to a system (API, website, IP, ...), we briefly sat down as a team and attempted (often successfully) to find a vulnerability. This demonstrated how quickly attackers can react and how insidiously even small vulnerabilities can be exploited. Through the collaboration with DSecured, the publisher has significantly improved its IT security and recognized that annual penetration tests are no longer contemporary and can convey a false sense of security. Particularly rewarding was the collaboration with the management level, who were aware that IT security is a process and that the goal is to reduce risks.