Infrastructure Security

Red Teaming Service

• Understand scope of activity

• Gather all available information about organization from internet

• Conduct exhaustive reconnaissance on technology stack

• Prepare attack plan

• Create customized waterhole & phishing pages

• Gain initial access

• Gather critical information, phone home

• Perform privilege execution & lateral movement

• Attempt to access crown jewels
• Comprehensive reporting with statistics and analysis

Why choose Anzen for your Red Teaming Requirement ?

Anzen Technologies provides the following benefits to organizations for their Red Teaming Assessment requirement:

• Team of experienced offensive security experts
• Collectively more than 10 years of experience in providing Red Teaming services of multiple flavours
• Multi-layered Assessment approach
• State-of-the-art Exploitation lab setup for remote assessments
• Updated with latest technological advancements (Cloud, Virtualization, mobile etc.)
• Additional support for closure of findings (if required)
• Tailor-made separate Executive & Technical Reports and Dashboard

Vulnerability Assessment & Penetration Testing

• Vulnerability Assessment is used to identify known vulnerabilities at the network, operating system, server, and application level.
• Through Vulnerability assessment of infrastructure assets like servers, network devices, Operating systems, etc., we provide an organization overall picture of the vulnerabilities present on their network infrastructure.
• We extend our services by assisting in vulnerability mitigation and risk management.
• In Penetration testing, experts analyses the network infrastructure or specific assets from the point of view of a malicious hacker and tries to gain unauthorized access to servers, devices, or confidential data and even try to execute actions through elevated privileges.

Secure Configuration Audit

• Security code review is a technique used to uncover programming flaws at the development phase in order to mitigate the vulnerabilities from the source.

This service consists of two parts:

Manual Secure Code Review

• Strongest way to verify several key security controls like encryption, access control, data protection, logging, and system communication and usage at the back end.
• Helps in isolating and identifying architectural vulnerabilities.

Static Analysis using Automated Scanning

• For larger volumes of code, the code is scanned using specially designed source code scanners customized to your business needs.

Wireless Security Assessment

Wireless Networks are an integral part of organizations' network infrastructure and have exposure to internal/external threats.

ANZEN’s wireless security audit methodology is a result of research, proven techniques, advance testing tools and rich experience of our security experts in this area to ensures the maximum coverage over all possible threats from various dimensions. Several wireless deployments are accessible beyond the acceptable physical premises protecting the infrastructure, which presents unique threats. Attackers can target wireless access points with a pre-defined and planned attack strategy.

Wireless security assessment will help in detecting, locating and mitigating the risks posed by the current implementation of wireless network technology by taking a very pragmatic and systematic approach to assess & report the current security posture of wireless networks.

• Defining Testing Scope
• Detection of Wireless Access Points as well as Rogue Access Points (if any)
• War Driving
• Wireless Network Vulnerability Scanning
• Vulnerability Identification & Validation
• Wireless Device Configuration Review & Report

Cloud Security Assessment

The goal of a cloud security architecture review is to identify and highlight cloud security weaknesses and strengths and provide guidance towards building a mature cloud security architecture. Anzen’s cloud security architecture review process helps in mapping out the attack surface, identifying attack vectors and evaluating the threats.

• First, a Data Flow Diagram (DFD) of the cloud infrastructure is reviewed
• A Threat Model of the cloud infrastructure will be created
• Non-Functional Security Requirements (NFSR) documents that highlight security best practices and hardening guidelines of the entire technology stack in scope will be created
• Finally, Gap Analysis will be done

• ANZEN network architecture review is a process of thoroughly assessing the network component’s configurations with their placements in the network and network design.
• Our network security team will observe the network from a defense in depth strategy to withstand any network attacks.
• The audit objective is to assist in increasing the security posture of the network.

• Understanding organization business and the network infrastructure
• Review network design and deployed network security solutions
• Device configuration audit
• Review an organization’s security policy
• Analysis and Reporting