Twenty Year Anniversary

Security Consulting Services

Black, Grey and White Box Testing

In-house or off-the-shelf, open source or closed, we can perform comprehensive application testing to discover a wide variety of security issues. When performing a black-box review, we work only with public information gathered from the Internet, just as any arbitrary attacker might do. For white-box testing, we use the source code you provide to assist in identifying weak areas in your application and to confirm suspected vulnerabilities. With grey-box testing, you provide as much information about the target application as you're comfortable with and we leverage that slight advantage to more quickly determine serious threats and avoid pursuing the wrong paths through your architecture.

iOS / Android / Mobile Application Testing

Few things are more personal than a smart phone. The information that can be collected and shared makes them a valuable target. We can test your mobile app and related services, so that you can feel secure about applications you're developing, or those that you're considering deploying.

Targeted Penetration Testing

Red-team style pen-testing allows you to know whether a targeted resource in your company is safe. Credit cards, customer data, company secrets, whatever it may be, we can seek it out.

Vulnerability Remediation

Publicly disclosed issue and you aren't sure if the fix your developers have come up with is correct, or if it will just result in embarrassment? We can help. We can verify or help guide proper remediation of both issues we've discovered during an engagement or any externally discovered issues you may wish to take care of.

Risk Assessment

Whatever the situation may be, our consultants can work with you to identify and determine the severity of the security risks you may be taking. There is no way to completely avoid risk in life, but knowing about them before hand allows you to plan effectively. In situations where a risk can't be entirely removed, we will help you determine mitigating controls that you can put in place, to make a serious risk into a smart risk.

Perimeter Assessment / Penetration Test

With the world having the ability to hire out a botnet of a thousand computers to attack your network, it is easy to feel outmanned and outgunned. Attackers are constantly scanning the entire Internet looking for arbitrary ports that may allow them to break into your systems. If not a random attacker, foreign governments are also spending top dollar to do the same. To put this into perspective, if you were to hook up a server to the Internet and sniff all traffic, you would notice it getting scanned within minutes if not seconds. Yes, we can all agree there are bad people out there with dark motives.

So how do you verify that your systems aren't going to get compromised given the services you offer? Get a second set of eyes on it. Packet Storm offers both scanning and penetration testing against networks. We will find all exposed points on your systems and, per your request, will attempt to leverage those ingress points to access your network further. Our testing is important for new product/service launches, large code base changes to existing platforms, and various audits such as PCI. Our reports offer clear, concise information on the issue, proof of concepts for validation, and full remediation details.

Internal Security Assessment

Many companies suffer from a concept known as having a hard outside, a soft inside. This is where perimeter defenses may seem adequate, but inside the network everything is a free-for-all. This may work at a start-up with 10 employees, but as a corporation scales it becomes a risk nightmare. We can help assess everything from the security of your IT infrastructure to transitive trust issues between corporate and production networks.

Deliverables

Packet Storm delivers a detailed, comprehensive, and customizable report at the end of each security engagement. Reports typically include an executive summary, detailed technical findings with well defined proof of concepts, and recommended remediation steps.

Contact Us

All fields required First Name + Last Name



File Archive:

October 2018

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Oct 1st
    26 Files
  • 2
    Oct 2nd
    15 Files
  • 3
    Oct 3rd
    15 Files
  • 4
    Oct 4th
    15 Files
  • 5
    Oct 5th
    15 Files
  • 6
    Oct 6th
    2 Files
  • 7
    Oct 7th
    3 Files
  • 8
    Oct 8th
    23 Files
  • 9
    Oct 9th
    16 Files
  • 10
    Oct 10th
    15 Files
  • 11
    Oct 11th
    19 Files
  • 12
    Oct 12th
    16 Files
  • 13
    Oct 13th
    2 Files
  • 14
    Oct 14th
    2 Files
  • 15
    Oct 15th
    15 Files
  • 16
    Oct 16th
    20 Files
  • 17
    Oct 17th
    19 Files
  • 18
    Oct 18th
    21 Files
  • 19
    Oct 19th
    16 Files
  • 20
    Oct 20th
    0 Files
  • 21
    Oct 21st
    0 Files
  • 22
    Oct 22nd
    0 Files
  • 23
    Oct 23rd
    0 Files
  • 24
    Oct 24th
    0 Files
  • 25
    Oct 25th
    0 Files
  • 26
    Oct 26th
    0 Files
  • 27
    Oct 27th
    0 Files
  • 28
    Oct 28th
    0 Files
  • 29
    Oct 29th
    0 Files
  • 30
    Oct 30th
    0 Files
  • 31
    Oct 31st
    0 Files

Recent News

News RSS Feed
Presidential Race In Brazil Marred By WhatsApp Scandal
Posted Oct 19, 2018

tags | headline, government, privacy, phone, facebook, brazil
jQuery Zero-Day Was Exploited For At Least Three Years
Posted Oct 19, 2018

tags | headline, hacker, flaw, patch
Equifax Exec Only Gets House Arrest For Hack Insider Trading
Posted Oct 19, 2018

tags | headline, hacker, data loss, fraud, identity theft
Campaign 2018: Artificial Intelligence Is Automating Attacks On Political Campaigns
Posted Oct 19, 2018

tags | headline, government, microsoft, usa, russia, fraud, cyberwar, google, facebook
Twitter Releases 10M Tweets, Reveals Decades Of Foreign Influence, Including Russia's Efforts in 2016 Election
Posted Oct 18, 2018

tags | headline, government, usa, russia, fraud, cyberwar, twitter
Tea Party Super PAC Group Spilled 500k Voters' Info All Over Web
Posted Oct 18, 2018

tags | headline, government, privacy, usa, data loss
LuminosityLink Spyware Mastermind Gets 30 Months In The Clink
Posted Oct 18, 2018

tags | headline, hacker, malware, cybercrime, fraud
Oceansalt Linked To Defunct Chinese APT Comment Crew
Posted Oct 18, 2018

tags | headline, hacker, government, malware, china, cyberwar
Oracle Releases Patch To Address Over 300 Security Issues
Posted Oct 17, 2018

tags | headline, linux, database, flaw, patch, oracle
LibSSH Flaw Leaves Thousands Of Servers At Risk Of Hijacking
Posted Oct 17, 2018

tags | headline, hacker, flaw, cryptography
View More News →
packet storm

© 2018 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close