External attack surface
What of your IT is visible from the internet? Open ports, services, certificates and outdated software versions.
IT security · Consulting
Security testing
Whether your protection works only shows when it is tested. We examine your systems and networks from an attacker's point of view and deliver a clear report with prioritised actions.
Vulnerability scans
What of your IT is visible?
Using established tools, we determine which services are reachable and which known vulnerabilities they have. Repeated regularly, the scans make changes to your attack surface visible.
Internal networks
Servers, clients and network devices in the office network, including missing updates and insecure protocols.
Recurring checks
At fixed intervals on request, so new gaps are not discovered only at the next incident.
Configuration review
Settings that protect
Many gaps are caused not by missing updates but by settings. We review your configuration against BSI and CIS recommendations.
Servers
Hardening of Linux and Windows servers, running services, logging.
Firewall & VPN
Rule set, external exposure and protection of remote access.
Accounts & permissions
Administrator rights, orphaned accounts and password policies.
For vNOC42 customers
Request a security test directly in the portal
If your company is registered with vNOC42, you can have it tested immediately on request, once or on a recurring basis. The request is made by the administrator of your account, who releases the data needed for the test at the same time.
- Requested immediatelydirectly in the account of your vNOC42 access, the request comes straight to us
- Once or recurringas a single test or at fixed intervals, so that changes are noticed early
- Data released selectivelyyou choose what we see: open ports, operating systems with end of life, pending updates, unknown devices on the network and the firewall rule set
- Only what is neededpasswords, measurement histories, user accounts and contract data are left out
- Revocable at any timethe release is valid for 30 days and can be updated or revoked at any time
Process & results
Agreed, careful, traceable
Security tests touch running systems. That is why we follow a fixed process agreed with you.
- Written ordertesting only with your approval, within the agreed scope and time window and with named contacts
- Careful executionwe test production systems with care, risky steps only after explicit agreement
- Report with actionsall findings rated by severity, with concrete recommendations and a management summary
- Retestafter remediation we test again and confirm that the gaps are closed
Contact
Let's talk about your IT
Whether initial questions, specific consulting needs or a quote: we are personally available to you. No call center, no waiting queue.