Pentesting

The specific personal data processed during a penetration test largely depends on the target of the test. In general, the following categories can be distinguished:

The IEC 81001-5-1 defines requirements for the life cycle of the development and maintenance regarding healthcare applications and information technology within medical devices. To achieve this, the standard sets requirements for various processes in the life cycle of a medical…

Participating in the Microsoft 365 Certification App Compliance Program for Microsoft Teams applications, Sharepoint Apps/Add-ins, Office Add-ins and WebApps requires performing a penetration test. In the Initial Document Submission a company needs to submit supporting…

I read this a lot on the internet: I'm making familiar myself with Kali Linux! I want to learn Kali Linux! I've already installed Kali - now what? But what is Kali Linux anyway? How to learn Kali Linux? And is it really right for it to be so much in the spotlight?

Some standards can surprise you, even positively. The Austrian ÖNORM A7700 defines security requirements for web applications. Although the A7700 is largely unknown in Germany, it is still worth taking a look at the standard of the Republic of Austria.

In the approach during a pentest - or actually in the amount and details of the information base made available to the penetration tester - three variants can be distinguished: whitebox, graybox and blackbox pentesting.

The best Linux for beginners is Debian GNU/Linux. It is, in my opinion, the best Linux for beginners who want to learn as well as experts. It is a stable Linux distribution on which well-known other distributions such as Ubuntu or Kali Linux are based on, still Debian is not a…

The costs of a penetration test depend on the time spent and the daily rate of the penetration tester.

A penetration test is basically a structured attack on a company's IT infrastructure. During this, a penetration tester uses the same tools and techniques that a hacker uses in his attack. However, the objective differs between a malicious hacker and a professional penetration…

Penetration tests are mandatory for operators of critical infrastructures. In the BSI law under paragraph "8a Security in the information technology of critical infrastructures", companies are obliged to take appropriate organizational and technical measures to protect their…