sybr services
At SYBR, we pride ourselves in our work. We work with your company to help build a better foundation by offensive and defensive means. Our services are more than just assessments, they are the building blocks for your company to keep its data safe. Below is a non-exhaustive list of services and what they entail. For full details, or custom assessments, feel free to reach out!
Application Scan
- Provides a baseline to which all other tests are compared against
- Authenticated and unauthenticated scanning of web assets
- Source code scanning and reviews
- Manual checks eliminate false positives
Web Application Assessment
- Deep dive into applications and technologies
- Find real vulnerabilities that affect enterprises
- Gain insight into how vulnerabilities can be chained to compromise an organization
- Walk through of different remediation techniques catered your business
Mobile Application Assessment
- Manual static and dynamic assessment on real devices device
- Can other apps interact with your in a harmful way?
- Is sensitive data being stored correctly?
- Are best practices being used?
- Security controls
- Are security controls like Jailbreak detection implemented?
- Can they be easily bypassed?
- Application server testing
- Is the API verifying identities?
- Can the remote server be compromised?
Network Penetration Testing
- Test your organizations network from the inside
- Manually assess individual servers or IP ranges
- Gain insight into how bad actors move around your network
- Map out your external perimeter attack surface to understand where defenses are lacking
Endpoint Security Assessment
- EDR evaluations and comparisons
- Which vendor should you go with?
- What malware goes undetected by each?
- Can they be easily tampered with, bypassed, or disabled?
- Golden Image testing
- What can be done with a standard imaged laptop?
- What does it have access to?
- Is there any alerting on this activity?
Insider Threat Assessment
- Objective based scenarios
- Can Dave from HR access new, secret product information and exfiltrate data without being noticed?
- What information does a baseline laptop have access to?
- Stealthy attacks
- Live Off the Land while making little noise
Active Directory Security
- AD audits done through the eyes of an attacker
- Thorough, hands-on checks beyond best practices and benchmarks
- 'Hygiene Checks' that answer questions like:
- How many Domain Admins is too many?
- Are our assets tiered properly?
Security Training
- Coming Soon!