Cyber Security Services

IT audit by a security experts: we identify vulnerabilities, create a protection plan, reduce risks and prevent damage. A detailed report on your safety.

• Professionalism
  Only experts with experience of 10 years or more
• Support
  Update and control after end of the project - 6 months
• Unique methodology
  Hybrid Audit Approach with Practical Tricks by Attackers Around the World
• Own developments
  We automate the work to make it faster and better

• We clarify your needs and get access to systems + prepayment of work
• We do a security it-audit and find vulnerabilities
• Report presentation, demonstration of vulnerabilities and recommendations + final payment
• Free vulnerability recheck
• The average project time is from 1 week to 1 month.

• Penetration testing on the branch network across the country: IT-infrastructure Penetration testing of companies through internet, a physical "pentest" using social engineering, physical "pentest" using hardware tracking, physical penetration inside the protected perimeter.
• Preparation for PCI DSS: Numerous penetration testing of banks and ASV-scan within the PCI DSS, including foreign ones.
• Government agencies (Russia): Penetration testing of several federal agencies and their offices in the country.
• Experience in testing payment systems: External and internal penetration testing major payment systems.
• Industrial production: IS audit of internal and external networks of production enterprises.
• IS audits of Web-resources: Testing media sites, e-currency exchangers, entertainment and others.
• IS Audit of electronic documents: IS Audit of distributed electronic document management system. Audit software, protocols and architecture.
• IS Audit of electronic documents: IS Audit of the system of state interdepartmental electronic document management. Audit software, protocols and architecture.
• AntiPhishing: Protection of the American company Invitae from targeted phishing attacks. Employee training and implementation of gamification processes to combat phishing among employees.

• APT "Flame": The study of "Flame" in the investigation of the IS incident. "Flame" is a complex malware, which is widely used in some countries as cyber weapons.
• Analysis and development of corporate rootkit: Reverse Engineering of special software for corporate security for covert surveillance for employees.
• Anti-virus products: Leading antivirus products drivers research for vulnerabilities.
• Cryptographic software: Security analysis of cryptographic software, the company's market leader in enterprise encryption of traffic.
• Reverse Engineering Protected Software: Deobfuscating a mobile Android banking app obfuscated by top protection DexGuard.
• Reverse Engineering Malware: writing a tools for automatic decrypting configs from top malware families like trickbot\dridex
• Reverse Engineering: PLC firmware reversing
• Vulnerability Research: some 0days found in popular soft that helps financial institutions detect and prevent malware infections and phishing attacks
• Vulnerability Research: found fuzzed local code execution exploit in mimikatz dump file format parser
• Vulnerability Research: a large number of found platform based vulnerabilities in mobile applications from the RU financial sector
• Vulnerability Research: vulns found in avira, trendmicro AVs that bypasses AV scanning\excluding settings
• Vulnerability Research: found vulns in SIM Card STK applet to Android OS auth realization
• ATM Security: reversing interesting ATM jackpotting technique malware
• ATM Security: Identified 0day vulnerabilities for leading ATM vendors, developed physical-technical vectors of attacks on ATM that are unnoticeable for security and alarm systems