▸ Infrastructure

Tests may be carried out through internal or external points. We have ample experience in infrastructure penetration tests in different industries´ companies, in which we test everything from traditional devices to the execution of attacks through means that are often forgotten, like the X.25 protocol and war dialing.

▸ Applications

With vast experience in web applications, client-server and mobile, our team is prepared to work with the most complex environments, including SCADA. In the past, we successfully tested one of the protocols responsible for trade in the stock market. With more than 10 internet banking environments tested around the world, our team developed a sharp eye for identifying vulnerabilities in applications which were previously and largely audited.

▸ Wireless

We have large experience in external penetration tests in various industries, acting domestically and abroad, testing traditional infrastructures and even attacks through means that were “forgotten” by the competition, like the X.25 protocol and war dialing.

One of our specialists has dedicated the last 6 years of his career exclusively to social engineering attacks and red teaming, and was responsible for creating the whole global methodology and tools for social engineering attacks of an information security company that is known worldwide, present in over 30 countries. That is why PRIDE Security has the perfect arsenal to test the effectiveness of controls and your team’s training.

All technical support used by PRIDE Security is the result of our consultants’ experience added to Research & Development. The goal is to always audit new tendencies and discover vulnerabilities that are unknown, or test devices that are not frequently explored. On top of adding knowledge to the team, we use that differential to offer security solutions in technical analysis services, malware analysis, as well as research and development to offer an adequate response to challenges.

We manage infrastructure vulnerabilities, web applications and secure environment configuration through recurrent scanning that is controlled through a support ticket system to open a call for correction.

We support your team throughout the security development process. PRIDE Security works on the system architecture through the development phases, training, dynamic security testing and source-code audits to ensure that the application is being well developed, following the best security practices in the market. The goal is simple: to develop a software from scratch that offers resilience to attackers with different levels of experience.

We carry out many simulations to evaluate the effectiveness of configurations present in security tools implemented in the company. For that, we use an offensive mindset, in order to simulate traffic and actions of internal attacks, extraction of data and actions of the main malwares, testing the effectiveness of tools such as IPS/Firewalls/SIEM/Anti-APT. The goal is to identify flaws and improve their configurations.