TARGON
Red Team
TARGON performs penetration testing, vulnerability scanning, and red team engagements under an agreed scope and written authorization. Scope is defined separately for each engagement.
- Vulnerability Scanning Detection, validation, and risk assessment of known vulnerabilities.
- Internet Security Testing Security testing of internet-facing assets.
- Web Application Security Testing Review of authentication, authorization, and input controls in web applications.
- Mobile Application Security Testing Scoped security testing of mobile applications.
- Web Service / API Security Testing Security testing of web services and APIs.
- Internal Network Security Testing Testing of access and security controls on internal systems.
- VoIP Security Testing Scoped security testing of VoIP infrastructure.
- Wireless Network Security Testing Testing of wireless configuration and access controls.
- Social Engineering Testing Social engineering tests run under written authorization and defined limits.
- DDoS Testing / Report Review Authorized DDoS testing or technical review of an existing DDoS report.
- Source Code Analysis Security review of application source code.
- Web Application Load Testing Measuring how a web application behaves under load.
- Threat Modeling Modeling attack surface and threat scenarios together.
- Red Team Service Red team engagement under agreed scenarios and rules.
- Application Security Verification Standard (ASVS) Application security verification against the ASVS framework.
- Software Composition Analysis (SCA) Analysis of known risks in software components.
- Static Application Security Testing (SAST) Static security testing at source-code level.
- Dynamic Application Security Testing (DAST) Dynamic security testing of a running application.
TARGON
Blue Team
On the defense side, TARGON provides Kaspersky solutions, Active Directory, network and system infrastructure, and technical support. Support scope is defined by contract.
- Kaspersky Solutions Needs analysis, installation, integration, optimization, and technical support on Kaspersky products.
- Active Directory Identity, OUs, GPOs, and access; new deployment or cleanup of an existing environment.
- Enterprise Network and Infrastructure Network architecture, switches and routers, VLANs, cabling, and monitoring.
- Firewall and Access Control Firewall, segmentation, access policy, and VPN configuration.
- Technical Support and Maintenance Contracted remote support: incidents, updates, and configuration.
- SMB IT Services Network, identity, backup, email, and support at SMB scale.
- Container Security Secure configuration and review of container images and runtime.
- Infrastructure Hardening Hardening of server and infrastructure security settings.
- Security Monitoring Setup of a logging and alerting approach; operational support is set by contract.
- Release Gate Planning the security checks to apply before a release.