Security audits and penetration testing
We will find the weakest points in your company’s cyber security and advise you not only on how to remove them, but also how to avoid similar mistakes in the future.
What is characteristic to the security audit of IT systems, offered by SOFTIQ?
Our security audit is a comprehensive analysis of the degree of protection of IT systems and sensitive data of the company, conducted on the basis of an environmental interview, as well as collected materials, including, among others, security policies and procedures, network diagrams and systems documentation.
Security audit conducted by our experienced team allows us to:
The effect of the IT systems security audit offered by SOFTIQ is a detailed report, describing the detected threats, their significance and ways to remove them.
Our security audit of the IT systems is divided into 3 stages:
In addition to standard security audits of IT systems, which include automatic vulnerability scans, we have also prepared a penetration testing (pentests) service for our Clients.
SOFTIQ as your choice for security audits and penetration testing – our advantages:
What are penetration tests and what are the benefits of conducting them?
What are the results of penetration tests, professionally performed by SOFTIQ experts?
Our team has extensive experience in designing system architecture in accordance with the highest security standards, their construction, implementation and auditing, as well as user training.
Thanks to carefully planned penetration tests, we are able to provide you with information not only about potential security threats resulting from improper configuration, errors in the source code or technical vulnerability.
In the course of our work, we also analyze the security procedures implemented in the company and take into account the level of awareness of users and their susceptibility to social engineering attacks.
The most important results of penetration tests include:
Types of penetration tests performed by SOFTIQ experts.
One of the key decisions that we help our Clients make is the selection of the most optimal of the three scenarios for conducting penetration tests.
The “white-box”, “grey-box” and “black-box” tests differ primarily in the amount of information about the system being the target of the attack that we receive from the Client. As a result, this affects, on the one hand, the level of complexity and time-consuming of the selected type of test for the team conducting it, and on the other hand, the degree to which the test simulates the real course of a potential attack.
What are the different penetration test scenarios?
“White-box” variant:
- The team has full documentation of the tested solution provided by the client.
- It simulates an attack performed by a person with access to the source code and project documentation, as well as full access to the system at any level of permissions.
- Penetration testing in this form is accurate, usually takes less time and costs less than other variants, but it does not reflect the most likely course of an intrusion attempt.
“Grey-box” variant:
- The team has partial knowledge about the tested solution, provided by the Client.
- The test simulates an attack carried out by a person with some knowledge of the system architecture.
- This is an intermediate variant, characterized by less realism, but cheaper and faster than the “black-box” test.
“Black-box” variant:
- The team does not receive any information from the Client about the tested system.
- The scenario reflects the most likely course of an intruder attack from the outside.
- Testers start their work by collecting information about the company and the system that are publicly available, and then gradually use it to try to find gaps in the tested solution.
- This is the most time-consuming variant of the penetration test, which translates into the cost of the service.
- A great advantage is the high degree of realism, unattainable with other test variants.
Bearing in mind the specificity of the company and the system being tested, we advise our Clients on the selection of the most optimal variant of the penetration test for the company.
We also help to determine other key parameters of the test, such as the date of its execution (within or outside the company’s working hours), as well as decide whether or not to inform employees about the planned simulated attack (gaining the opportunity to check their real reaction to the threat).
Are you wondering which type of penetration test will work best for your company?
We have experience in designing, building, implementing and auditing solutions created using the following technologies.
Check our offer of security audits and penetration testing.
What do SOFTIQ Customers say about our services?
SOFTIQ has proven to be a team of professionals with a creative and determined approach to solving problems, focused on achieving the goal. However, it is more than just professionalism, the company really is powered by its people and working with the team at SOFTIQ is a pleasure.
Anna Serpina – Forkasiewicz
President of PORTAL PZP
Cooperation with SOFTIQ in the area of project implementation was exemplary. The huge knowledge of the company's employees and their full understanding of the scope of services that were required by the 3S Data Center, resulted in a very fast adjustment to our IT platform technology, at the levels required.
Jacek Chylak
Sales Director 3S DATA CENTER
We had the opportunity to cooperate with SOFTIQ during the implementation of a project for the Ministry of Family, Labor and Social Policy. We are currently planning further collaboration. Reliability, constructive cooperation and a nice atmosphere mean that we approach projects with Softiq with a positive attitude
Piotr Szostok
President ALTA SP. Z O.O.
I have been working with SoftIQ on IT project and I've been very happy with their effort as well as result. That's why I'm very glad to represent them here in Sweden
Jonas Venström
CEO of Veroveli AB
I recommend SOFTIQ company as a professional Software House with highly-skilled IT specialists. I was their client and they realized my IT startup project. SOFTIQ’s team has a passion for the job that’s why suggested solutions and engagement are on the highest level.
Maja von Bomhard
owner of Spacenet AG
SoftIQ has proven to be our most reliable IT partner when it comes to delivery, flexibility and quality of work. They quickly fulfil our every need quickly and often come up with better alternative solutions - and at the end of the day, SoftIQ is truly powered by people!
Svavar Viðarsson
CEO Imperio Nordic