ISMS, Critical Information Infrastructure etc.
Systematic security vulnerability assessment
that meets regulatory standards.
Fines for failing to carry out mandatory inspections such as ISMS and the Personal Information Protection Act
Security vulnerabilities increase over time
Security holes caused by configuration changes during operation
Insufficient response to new CVE vulnerabilities announced daily
Specialized assessment services by target
Comprehensive inspection of OS security settings, account management, patch levels, etc. on Windows, Linux, and Unix servers
Configuration inspection of network devices such as routers, switches, and firewalls, and analysis of configuration vulnerabilities
Web application vulnerability inspection based on the OWASP Top 10, assessing SQL Injection, XSS, and more
Inspection of DB security settings, access control, and encryption levels for Oracle, MySQL, MSSQL, etc.
iOS/Android app security inspection, analysis of data storage, communication security, and reverse-engineering vulnerabilities
Inspection of AWS, Azure, and GCP security settings, analysis of IAM policies and storage access control
We perform thorough security inspections using a systematic methodology
Vulnerability analysis and evaluation criteria
Server/network/web inspection items
Web application security vulnerabilities
Information security management system criteria
Reasonable pricing based on assessment scope and scale
Server/network inspection
Web application inspection
Company-wide infrastructure inspection
Mandatory vulnerability assessment for obtaining information security management system certification
Regular vulnerability inspections required by law for public institutions, financial companies, etc.
Quarterly/semi-annual regular security level inspection and management
Security inspection after introducing new systems or major updates
Define assessment scope, confirm asset list, agree on schedule and methodology
Automated tool scanning, manual inspection, checklist-based analysis
Vulnerability classification, risk assessment, remediation prioritization
Detailed report submission, remediation guide, re-assessment
Under ISMS certification criteria, at least once a year is mandatory, and we recommend quarterly assessments to maintain security levels. Assessments are also needed when there are major system changes.
Standard vulnerability assessments do not affect services. Potentially risky assessments such as load testing are carried out at a safe time after prior agreement.
By default, we provide a detailed remediation guide and your internal staff carry out the remediation. Remediation on your behalf is also available if needed, so please ask during the consultation.
Server, network, and web vulnerability assessments are the basics, and DB and mobile app assessments may be added depending on the industry. We will provide details through a consultation.
Yes, we provide specialized assessments for major cloud environments such as AWS, Azure, and GCP. We inspect IAM policies, network settings, storage access control, and more.
From ISMS certification to regular security inspections,
our expert consultants are with you.
KISA certification criteria compliant
YourIT experts will answer your questions quickly and easily.