Security assessments for all digital systems

Insight into IT Vulnerabilities from Digital Systems

turingpoint is recognized as a top provider of pentests and offers comprehensive security assessments to meet the unique security requirements of customers. With a pentest team of subject matter experts, we have the experience to uncover vulnerabilities in a range of technologies - from AWS to complex SaaS solutions to IoT.

End devices and networks are an elementary component in the implementation of digital business models! Our IT security consultants create a complete IT security concept in accordance with the German Data Protection Act (DSGVO) and the Federal Data Protection Act (BDSG) (protection of personal data) for the operation of secure data centers and cloud services. This includes the preparation of an IT emergency plan with measures and recommendations for action in the event of acute incidents.

We put a big focus on the communication and presentation of our security know-how. We work closely with developers, security engineers and CISOs to ensure that all parties understand the results of the evaluation. Documentation is also a top priority and we provide a sample pentest report in advance.

Your Advantages with Us

The security assessments are planned, performed and evaluated by our specially trained security engineers.

Benefit from the years of experience of our security engineers .

Our security engineers have extensive academic training and many years of experience in identifying and eliminating vulnerabilities of all kinds.
Through regular training and further education, we ensure that new tools and techniques can be used as quickly as possible.
We are constantly developing our tools and processes to deliver the best possible results to our customers.
Extensive research ensures that even daily weaknesses can be identified.

We conduct security assessments based on recognized standards and guidelines.

We audit according to internal as well as external and publicly available standards. This includes: OWASP, OSSTMM, PCIDSS and CVSS 3.0 standard.
Our processes are adapted to the practical guidelines for pentests of the Federal Office for Information Security (BSI).
We have developed a comprehensive reporting format that provides optimal insight into our work and its results.
Depending on the assessment and information basis, we carry out white, grey or black box tests.

IT Security Range of Services

Basically, we classify Cyber Security Assessments in three types, which, however, are individually compiled for each application case, so that synergy effects can arise.

Pentests

In a penetration test, applications, systems, mobile apps and infrastructures are checked with the methods of an attacker. We simulate a professional hacker attack to identify weak points.

Learn more

Cloud Security Assessment

In a Cloud Security Assessment, a cloud infrastructure is analyzed and evaluated. The various configurations differ greatly from traditional infrastructure.

Learn more

Adversary Simulation

Attack simulations are used to test an organization's detection and response capabilities. The Red Team tries to access sensitive information in every possible way and as undetected as possible.

Learn more

References

Companies that trust our professional competence.

Frederik Vollert
Managing Director & Co-Founder of Phrase
turingpoint conducted a web penetration test on the Phrase.com website and API as an external system audit as part of our Information Security Management System. The team conducted the tests in a highly professional manner, identifying a number of potentially malicious exploits and security enhancements through libraries, the application of security protocols and the browser level. The report helped us identify current strengths and weaknesses in our security architecture and resulted in changes to our code base to minimize security weaknesses. We look forward to our next penetration test with turingpoint!
Hans Lechner
IT Manager of reifencom GmbH
I hereby confirm to turingpoint GmbH, Rödingsmarkt 9, 20459 Hamburg, Germany, for us services of penetration testing within the scope of a security audit of public web applications to have produced. The scope of services included the testing of the web pages of Internet presence and the associated e-commerce system of our company. The services were completed on time and in very high quality within the set deadline. quality workmanship. The interests of the client were always taken into account and the service is performed to the complete satisfaction of the customer.
Dr. med. Christoph Twesten
Founder / CTO – MillionFriends
Perfood GmbH address several diseases and predeseases with digital therapeutics. The portfolio includes medical products and DIGAs (digital health application under the German Healthcare Act). IT Security is a very important aspect of our business. In April 2020 turingpoint conducted a penetration-test on the API of our backend as an external system audit as part of the certification process for one of our medical products. In July 2020 we consulted turingpoint for a global Cybersecurity audit including our mobile app, backend, website and aspects of IT security in our office in Lübeck. The team conducted the tests in a very professional way and was a great help in finding potential threats and optimize the security of our system. Turingpoint also reviewed the architecture of our backend setup and helped us to design this critical part of our infrastructure in the most secure way. We are very satisfied with the results and looking forward to our next project together!
Boris Steinke
CTO - JITpay™ GmbH
As a FinTech and logistics start-up, we at JITpayTM rely on state-of-the-art technologies and have efficient digital business processes. With JITpayTM we have created the possibility to digitalise the accounting processes in logistics. As part of the Central Accounting System (ZAL®), JITpayTM takes over the accounting of all logistics costs for shippers, forwarders and transport companies. At JITpayTM the topic of security is of particular importance because we are not only a service provider but also handle sesible data in large quantities. In September 2020 we commissioned turingpoint to conduct a penetration test as part of the certification process for an authority, in order to find possible leaks in our APIs and backends. The turingpoint team carried out the tests in a very professional way and searched our systems for potential threats in 14 days. At the end of the tests we received a very good and understandable report that helped us to fix the detected threats. We are very satisfied with the results and look forward to our next joint project!
David Holetzeck
CEO – Table of Visions
Our expectations regarding quality, customer service and the execution of the penetration test and the hosting security check were exceeded and we can recommend the team of turingpoint GmbH without any restrictions. If you are looking for a service provider who prepares documents in such a way that everyone can understand them and provides advice on how to solve problems, turingpoint is the right partner for you.