XRAY CyberSecurity

Profile set up by Edverise AI

Set Up By Edverise AI

Edverise AI built this profile by analyzing thousands of data points across the web. If you own this business, become an Edverise partner to manage and update your profile.

Become an Edverise Partner

Overview

$10,000+

Min Project Size

$50 - $99/hr

Avg Hourly Rate

10 - 49

Employees

2013

Year Founded

ABOUT XRAY CYBERSECURITY

Outpacing cyber threats to protect your business!

We offer a comprehensive range of Penetration Testing Services, concentrating exclusively on pentesting. This focus allows us to cultivate deep expertise and ensures that our recommendations are completely honest and objective, as we do not sell any software or hardware, nor do we push unnecessary products or services. Our engineers bring over 15 years of experience and hold specialized international certifications in Ethical Hacking, including OSEP, OSCP+, BSCP, CEH, and PNPT. Our clientele consists of prominent global companies from various sectors, including SaaS, Manufacturing, Retail & E-commerce, Aerospace, and Critical Infrastructure (Energy).

Languages Spoken

EnglishUkrainian

HIGHLIGHTS

$10,000+

Min Project Size

$50 - $99/hr

Avg Hourly Rate

10 - 49

Employees

2013

Year Founded

Services

Focus

Industries

Clients

Services Provided

100% Cybersecurity Assessments & Hardening

Portfolio

Danone — Pentest for a world leading food company

Danone

Danone is a prominent global food and beverage company, active in more than 120 markets, with net sales reaching approximately 27.62 billion euros in 2023. Its portfolio features several internationally recognized brands, including Activia, Actimel, Alpro, Danette, Danonino, Danio, evian, Volvic, Nutrilon/Aptamil, and Nutricia. In large corporations, compliance controls are essential for ensuring the sustainability of business operations, especially in the realm of cybersecurity risk management. Regular penetration testing is crucial to ensure a high level of security and to lower potential risks affecting consumers, employees, contractors, and shareholders. XRAY CyberSecurity has performed certain penetration testing activities using both Blackbox and Greybox methodologies on some IT services. Our pentesting approach is built on leading standards such as NIST SP 800-115, OWASP, PTES, and OSSTMM, enhanced by our 15 years of experience. During testing, a comprehensive array of typical pentesting tools was utilized, but the linchpin of our success was manual analysis, which linked individual vulnerabilities to privilege escalation, thus demonstrating a practical compromise of IT infrastructure. While specific results of the penetration testing cannot be disclosed due to NDA restrictions, the general benefits of engaging XRAY CyberSecurity include: - An impartial assessment of security posture from an attacker’s viewpoint - Access to ethical hacking expertise and real-world attack simulations - Compliance with regulations and risk reduction - Customized remediation plans for effective resource allocation - Validation of the efficacy of security controls - Ongoing security enhancement via periodic assessments, fostering a proactive cybersecurity culture By utilizing our expertise, Danone can efficiently recognize and address risks, safeguard its assets and data, and maintain a competitive advantage in today’s challenging cybersecurity environment.

Carlsberg — Pentest for a world's leading brewer

Carlsberg

**Client Overview:** Carlsberg Group is a major global brewery conglomerate, employing over 40,000 individuals and distributing its products in more than 150 countries. Carlsberg Ukraine operates breweries in Kyiv, Zaporizhzhia, and Lviv, offering a range of beverages, including beer and both alcoholic and non-alcoholic options under various brands such as Lvivske, Robert Doms, Carlsberg, Tuborg, Kronenbourg 1664, Arsenal, Kvas Taras, Somersby, Guinness, Seth&Riley's Garage, Warsteiner, Grimbergen, among others. **Project Motivation:** The initiative was driven by the need for preventative measures and to align with the parent company's requirements as well as internal cybersecurity policies. Since the inception of its corporate IT systems decades ago, Carlsberg has consistently invested in safeguarding its IT infrastructure, including regular independent penetration testing. **Solution Provided:** XRAY CyberSecurity has performed numerous penetration tests over a decade-long partnership, covering External Pentests, Internal Pentests, Wi-Fi Pentests, and Social Engineering assessments. These tests targeted various IT systems across multiple locations of the client, simulating different types of attackers, including Blackbox and Graybox scenarios. **Methodologies Used:** Our penetration testing approach adheres to leading standards such as PTES, NIST SP 800-115, OSSTMM, and OWASP, enhanced by our own 15 years of experience. **Tools Utilized:** During the penetration testing process, a comprehensive suite of standard pentesting tools was employed, but the key to success lay in manual analysis, which connected findings from individual vulnerabilities to escalate privileges and illustrate practical compromises of the IT infrastructure. **Outcomes:** Following each penetration testing engagement, an Action Plan was created in collaboration with the Customer’s team, identifying priority tasks to enhance security based on the company's available human and financial resources. Subsequent re-tests validated the effectiveness and promptness of the vulnerability remediation efforts.

VEON — Global Mobile Operator Penetration Testing

VEON

**Client Background** VEON is a mobile telecommunications provider that delivers integrated connectivity and online services to approximately 160 million customers in six countries, representing over 7% of the global population. **Project Initiation** The launch of this project was prompted by VEON's opening of a new large office in Lviv, aimed at enhancing its finance, procurement, and HR functions in Ukraine, Armenia, Georgia, Kazakhstan, Kyrgyzstan, Tajikistan, and Uzbekistan. The establishment of the new office required building the entire IT infrastructure from the ground up. Consequently, following the implementation of IT services, it became essential to verify the security of all components and resolve any vulnerabilities to prevent potential breaches. **Solution** XRAY CyberSecurity performed a penetration test to evaluate the IT infrastructure, eliminate cyber threats, and manage risks. The assessment covered external, internal, cloud networks, and office wireless systems. Various types of attackers were simulated: Blackbox (without prior information/accounts) and Greybox (using three different user account types from various departments within the infrastructure). **Methodologies** The penetration testing methodology utilized leading standards, including PTES, NIST SP 800-115, OSSTMM, and OWASP. **Tools Used** A comprehensive collection of common pentesting tools was employed during the assessment; however, the key to success lay in manual analysis, linking the results of individual vulnerabilities to elevate privileges and demonstrate feasible compromises of the IT infrastructure. **Results** Twelve exploitation scenarios were executed, showcasing the potential for compromising the IT infrastructure for each attacker model. Recommendations were formulated at both the technical and executive levels.

13 more projects