OUR RANGE OF SERVICES
Services
Our service portfolio includes penetration tests and red teamings as well as consulting, concepts, reviews and analyses.
Moreover, we at cirosec assist our costumers not only with incident response and forensics but also with the conception, neutral evaluation and implementation of products and solutions.
The portfolio is rounded off with our trainings and measures to raise awareness.
IT Security Consulting, IT Security Concepts, Risk Analyses & Reviews
We have many years of experience in providing consulting for complex security environments as well as in designing and analyzing them.
We perform 360-degree security analyses, for example, and advise enterprises on protection against target attacks, APTs and ransomware, on endpoint and extended detection & response (EDR/XDR) as well as on zero trust architectures. We create AD tiering concepts and provide enterprises with assistance at the intersection of artificial intelligence (AI) and IT security.
Penetration Tests
We have long-standing experience in the field of audits and penetration tests. Our consultants regularly attend international hacker conferences and carry out research on vulnerabilities. This allows us to not only examine your IT solutions for potential security risks on a conceptual level, but we can also detect the technical and organizational vulnerabilities that actually exist and evaluate them appropriately.
We know the latest attacking techniques and methods and regularly find unknown vulnerabilities in standard software. Depending on your needs, a penetration test can go far beyond a standard scan. This is why we time and again detect vulnerabilities in supposedly secure systems and applications that other auditors have missed.
Thus you can be sure to find your vulnerabilities and close the gaps before an attacker can find and exploit them.
Red Team Assessments
There are several aspects that differentiate a red team assessment from a traditional penetration test. The biggest difference is that the focus is not placed on one application or system but on all assets of a company alike. It does not matter whether that is an IT system, an employee, a site or a business within the holding structure.
Incident Response and Forensics
We offer our customers throughout Germany 24/7 availability of our experts for incident response and forensics with guaranteed response times as well as a comprehensive range of services to handle targeted attacks and other IT security incidents.
Vendor-Independent Selection & Implementation of IT Security Solutions
Technical security measures are often tied to commercial products or tools. Based on the long-standing experience and the independence of particular vendors, we guarantee you not only competent assistance in selecting the best products but also the stress-free implementation and configuration in your environment. Our aim is to find the right balance between achievable security and easy operability.
Our typical services include:
- Conception independent of particular vendors and advice on selecting products
- Sale and delivery of products
- Implementation and configuration
- Development of operational concepts and processes
- Phone support, troubleshooting and operational support
IT Security Training and Awareness
We offer individually developed workshops and trainings, during which our qualified consultants show you the proper way to handle state-of-the-art technologies and recent security issues.
Security Management
and Compliance: ISMS, ISO 27001, NIS 2 and DORA
We support you as you set up your ISMS, create guidelines, carry out ISO 27001 gap analyses or implement NIS 2, the Cyber Resilience Act (CRA) or DORA, and we also advise you on GRC tools, emergency management and business continuity management (BCM). For management bodies we offer a compact NIS 2 training course.