Services / Identity & Security
IT security consulting, penetration testing and incident response Know your attack surface before attackers do.
Identities and email are the most common entry points for attacks. We harden Active Directory, Entra ID and Microsoft 365, test your environment with an attacker's methods and are ready when an incident has to be contained and investigated.
- Active Directory
- Entra ID
- Hardening
- Penetration test
- Incident response
- Forensics
- CVE monitoring
What we deliver
01 Identity Structure Active Directory and Entra ID, clean up permissions, secure synchronisation and authentication.
02 Hardening Harden Microsoft 365, Exchange and gateways according to current recommendations, with documented deviations.
03 Penetration tests Targeted tests of mail and identity infrastructure: spoofing, gateway bypass, exposed services.
04 Incident response Containment, analysis and remediation for compromised accounts, servers and gateways.
Vulnerabilities in view
With the public CVE tracker we follow new vulnerabilities in Exchange, Microsoft 365, Active Directory and mail gateways every day, as well as all actively exploited flaws listed in CISA KEV. Critical findings go directly into our consulting.
Services in this field
Email penetration testing Testing spoofing, gateway bypass, open relays and exposed services from an attacker’s point of view. Email incident response Compromised mailboxes, business email compromise, attacked Exchange servers and gateways. Email forensics for authorities Establishing origin, authenticity and mail path: analyses and reports for prosecutors and police.
Technical articles on this topic
Planning something in Identity & Security?
In a first conversation, we'll look at where you stand, the risks and the most sensible next step.