Security Assessment and Planning
1Cyber delivers full-scale security assessment and planning services for the components of IT infrastructures:
- Web, mobile, desktop applications.
- Network services.
- Remote access software.
- IoT devices.
- Employee behavior.
- Client side.
We help our customers to identify their security risks and define the measures to mitigate the risks by offering our competencies in the areas listed below.
Information Security Consulting
Our security experts will consult you on the possible ways of monitoring the robustness of your cyberenvironment against security threats, detecting vulnerabilities in your network or apps, improving the performance of your information security solutions, and ensuring the protection of your sensitive data.
We uncover security loopholes in the components of our customers’ IT environments. 1Cyber security team carefully checks the protection level of your IT infrastructure and defines measures to reduce the number of security weaknesses inside your network and apps.
Infrastructure security audit
Our security team assesses your IT infrastructure to identify vulnerabilities in the following areas:
- Security policies and procedures.
- Security monitoring tools.
- Physical access control.
- Configuration management.
- Version control.
Compliance testing
Our security engineers perform automated and manual scanning of your IT environment and its elements to ensure your compliance with PCI DSS, HIPAA, and other regulations and standards. On the basis of the testing results, the security team provides you with a detailed attestation letter.
Vulnerability assessment
1Cyber performs automated and manual security evaluation to detect vulnerabilities in their customers’ IT infrastructures. Our security testing team identifies, quantifies, and ranks network security weaknesses. Based on the assessment results, we give our customers recommendations to help them to eliminate security risks.
Penetration Testing
1Cyber security testing team pinpoints system vulnerabilities, validates existing security measures, and provides a detailed remediation roadmap. Equipped with the special tools and industry-specific test scenarios, the team performs penetration testing according to one of the three approaches:
- Black box testing. We work in life-like conditions having strictly limited knowledge on your network and no information on the security policies, network structure, software and network protection used.
- Grey box testing. We examine your system having some information on your network, such as user login details, architecture diagrams or the network’s overview.
- White box testing. We identify potential weak points by using admin rights and access to server configuration files, database encryption principles, source code or architecture documentation.
Stress testing: Emulation of attacks
1Cyber security testing team evaluates the stability of your infrastructure and its components by testing it beyond normal operational capacity with the use of special tools such as Siege and Apache JMeter. We apply our expertise to emulate denial of service (DoS) or distributed denial of service (DDoS) attacks against your network or applications to:
- Determine whether the robustness of software or hardware is satisfactory under stress conditions (e.g., heavy network traffic, process loading).
- Identify potential errors that can occur in case of system overloading.
