We carry out penetration tests for companies of different sizes
From small and medium-sized companies to corporations, public administration and critical infrastructure organizations – we carry out penetration tests of all sizes. Up to date, in accordance with standards such as the OWASP Top 10 and based on ISO 27001.
Rely on the expertise of our pentesters, it’s that simple
1. establishing contact & exchanging initial details
Once you have contacted us, we will schedule an initial meeting to discuss your request in more detail. We reserve the desired implementation period subject to reservation and determine the work packages and scope. You will then receive a quote.
2. offer acceptance and kick-off date
Your appointment is reserved as soon as you have accepted the offer. You will receive an order confirmation and all necessary contracts. All necessary information should be available for the kick-off meeting.
3. carrying out the test
We start carrying out the test on the agreed date, which is accompanied by an intensive exchange.
4. dispatch of the report and presentation of the results
We provide you with the report and, if required, we then hold a meeting to present the test results and recommended measures to your technicians and management.
Silas Borgmeier
Account Manager
Distribution
Would you like a personal consultation?
I will be happy to assist you with our expertise.
Our pentest work packages at a glance
Analysis of the external attack surface
External pentest
From the outside, we analyze your attack surface and examine the IP addresses provided or obtained
Web application
We test your web application. You can commission us before going live. Alternatively, you can provide us with a test instance.
Interfaces (API)
Do you provide interfaces for the exchange of information and data? We check these for availability, confidentiality and integrity.
Mobile app
Are you responsible for the operation of an Android, iOS or hybrid application? We check all common formats and implementations.
Password audit
We check the strength of the passwords used by your AD users with the help of simple and more complex password attacks.
Data leaks
The pentesters at AWARE7 receive a list of employees and compare it with data thefts. The list is tested against a variety of data leaks.
Darknet research
We search with keywords, data points and data sets that are circulating on the darknet and are used, among other things, for criminal activities.
Cloud auditing
This implementation is used to check the configurations of cloud environments for common misconfigurations.
Desktop application
If you provide customers with a desktop application, we check it for vulnerabilities that are dangerous for you and your customers.
Single sign-on
Our pentesters simulate a professional attack on an application with a single sign-on (SSO) implementation.
Analysis of the internal attack surface
Internal pentest
We analyze your attack surface from the inside. Experience the potential damage if an attacker has managed to penetrate your infrastructure
Evil Employee
A targeted investigation is carried out to determine what options are available to an employee who could cause an incident through gross negligence.
Stolen Notebook
Find out how great the potential for damage is if a laptop falls into the wrong hands.
WLAN audit
Do you provide wireless connection options? We investigate how securely these are designed.
Configuration audit
We check the implementation of your configuration against best practices, enabling you to determine the level of security.
Code review
The code you provide is evaluated with regard to the level of information and IT security.
Social engineering
AWARE7 analysts make targeted attempts to obtain information and access to rooms.
Physical pentest
The resilience of buildings and access restrictions is analyzed. Subsequently, a targeted attempt is made to penetrate sensitive areas.
Internal attack surface cloud
It examines how vulnerable the client’s cloud network is to attacks from internal services.
Find out more about our completed projects
Success stories
Callback service
Write to us with your request. We will be happy to call you back at a specific time.
Appointment service
Arrange a digital appointment with us so that we can discuss your requirements.
Contact form
Leave a message via our contact form. We will get back to you.
An excerpt from our pentesters
Vincent Reckendrees, MSc
Head of Offensive Security
Vincent Reckendrees has been working on the security of web applications for years. Among other things, he holds the OSWP certificate from OffSEc.
Thomas Henning, BSc
Offensive Security Consultant
Thomas Henning is a certified OSCP pentester. He uses his extensive expertise and analytical skills to uncover security vulnerabilities in IT systems.
Tim Barsch, BSc
Offensive Security Consultant
Analyzing internal networks and micro web services is part of Tim Barsch’s day-to-day business. He holds a bachelor’s degree in IT security.
Download the employee profiles of our qualified pentesters free of charge
To ensure quality, we at AWARE7 GmbH make sure that our penetration testers receive regular training and further education. These include industry-renowned certificates and examinations. Would you like to get an impression of the entire team? We are happy to provide you with this information.
IT security made in Germany
Attacking and testing applications is the means to an end. The medium-term goal is always to increase the level of IT security and thus enable the long-term protection of customer and company data. We have been awarded the “IT Security made in Germany” seal by the TeleTrust Bundesverband IT-Sicherheit e.V. (German IT Security Association). The document declaring and authorizing the use of the seal is available for inspection.
Even though we operate worldwide, our headquarters will remain in Germany
AWARE7 GmbH has been based in Germany since its foundation. The location in Germany is valued by our international customers due to the high quality standards.
Products and services are free of hidden accesses
All of the services we provide are carried out in accordance with ethical principles. The removal of all access points after a test is mandatory and firmly integrated into the process.
Research & development takes place exclusively in Germany
New products and collaboration with students and scientific institutes are part of our corporate DNA. We are always at the cutting edge of research and development and are based exclusively in Germany.
