Generally, any modern company is connected to the internet and other networks thus it is not possible to monitor each individual user that interacts with your business resources (servers, terminals etc). In order to assist your company in filling this control gap, Infinitum offers both passive and active security services.
As a first step, our engineers are able to evaluate the current security status of your equipment and software by performing a Vulnerability assessment (i.e. identifying and quantifying security vulnerabilities in your environment). We provide an in-depth evaluation of your information security posture, indicating weaknesses as well as providing the appropriate mitigation procedures required to either eliminate those weaknesses or reduce them to an acceptable level of risk.
Following this procedure that maximize the passive security level of our system, our engineers perform a virtual (non-threatening) attack on your business resources (Penetration Testing) in order to ensure that all the security applications and procedures are working as intended. A penetration test simulates the actions of an external and/or internal cyber attacker that aims to breach the information security of your organization. Using several tools and techniques, the penetration tester (ethical hacker) attempts to exploit critical systems and gain access to sensitive data.