Infrastructure Review

The host configurations that make up an application’s infrastructure are essential to the overall security stance. We review routers, firewalls and web and database server host configurations to minimize the attack surface.

We provide clear recommendations as to the severity of any issues discovered and how they can be mitigated. To ensure you receive the highest useful value from this process, we don’t hand you a report with thousands of non-issue findings to wade through. Instead, we prioritize, categorize and provide clear guidance on exploitable issues of consequence.

Our infrastructure review service includes, when applicable:

  • In-depth architecture and design reviews for corporate networks, VPNs, VOIP implementations, Cloud Services and Perimeter networks.
  • Audits using industry standard frameworks including ISO, FISMA, HIPAA and PCI.
  • Configuration reviews for major infrastructure components including Cisco Routers, Switches, and Firewalls; Microsoft Active Directory, Exchange and Servers; Unix implementations such as Solaris, Linux and BSD variants.

Hardware product testing of infrastructure devices. This may involve black box or gray box testing of devices that provide services to corporate networks (proxies, firewalls, communications devices, etc.)