Zigrin Security

Profile set up by Edverise AI

Is this your business? Become an Edverise partner & Claim Now →

View Website

Set Up By Edverise AI

Edverise AI built this profile by analyzing thousands of data points across the web. If you own this business, become an Edverise partner to manage and update your profile.

Become an Edverise Partner

Overview

$1,000+

Min Project Size

$50 - $99/hr

Avg Hourly Rate

2 - 9

Employees

2017

Year Founded

ABOUT ZIGRIN SECURITY

We increase the cost of cybercriminal activities.

We are a group of cybersecurity specialists dedicated to delivering thorough, practical security assessments for internal networks, applications, cloud solutions, e-commerce sites, and mobile devices. Our clientele and partners consist of businesses, non-governmental organizations, public institutions, and military entities from across Europe.

LANGUAGES SPOKEN

EnglishPolish

HIGHLIGHTS

$1,000+

Min Project Size

$50 - $99/hr

Avg Hourly Rate

2 - 9

Employees

2017

Year Founded

Services

Focus

Industries

Clients

Services Provided

100% Cybersecurity Assessments & Hardening

100% Other IT Consulting and SI

Portfolio

Securing company’s main website

Britenet

Britenet is a software development and outsourcing firm with a workforce exceeding 900 employees. The company focuses on developing systems that enhance operational processes across various business sectors. Its website serves as a platform to represent the brand to both current and potential clients, while also featuring job listings and a recruitment form for candidates to submit their resumes. Ensuring the security of the information hosted on the website was crucial for Britenet. A breach could severely damage the company’s reputation and lead to a loss of potential clients. The aim of the website penetration test was to uncover vulnerabilities and misconfigurations that might enable cyber adversaries to access sensitive information, alter the website, or prevent visitors from accessing it. We selected a black-box penetration test, simulating Internet-based threat actors, as the most effective approach. The focus was on discovering content and understanding the custom mechanisms used on the website. Consequently, we found 9 vulnerabilities, which varied from high-severity issues to informational findings that posed no immediate threat. Britenet addressed vulnerabilities that allowed for: 1. Unauthorized access to the application’s operating system and database housing its data. 2. Extraction of applicant information from submitted resumes. 3. Theft of source code and configuration files. 4. Execution of Denial-of-Service attacks that hindered visitor access to the website. 5. Theft of employee password hashes. 6. Impersonation of an employee in internal communications.

MISP Penetration Testing

NCSC - NATO Cyber Security Centre

MISP is an Open Source Threat Intelligence Platform utilized by various entities, including NATO, CiviCERT, CSSA Cyber Security Sharing & Analytics, and FIRST. However, it faces challenges due to its vast size and the involvement of hundreds of contributors. The source code sees updates every few days, with monthly releases on average, which heightens the risk of introducing new vulnerabilities. Additionally, with over 600 organizations globally using MISP, it becomes an attractive target for potential attacks. To address these vulnerabilities in web applications, we opted for several effective discovery methods: 1. Grey-box penetration testing—this is particularly suited for internal web applications or those mainly accessible to authenticated users, making it our primary approach since MISP requires user authentication. 2. Automated source code scanning—this provides a fast way to identify obvious vulnerabilities. 3. Manual source code review—to verify findings and eliminate false positives. 4. Examining past vulnerabilities—this approach involved looking for security issues similar to known vulnerabilities in older MISP versions due to its extensive attack surface. During our security assessment, we identified two vulnerabilities that the MISP team promptly addressed, one rated critical (9.9 out of 10) and the other of medium severity. The critical flaw had the potential to allow unauthorized access to sensitive information, theft of password hashes, user impersonation, and attacks on the internal infrastructure of victim organizations. The client opted to implement a silent patch and notify organizations about the vulnerability. All organizations that upgraded to the patched version of MISP were protected from the identified threats.

Projects & Clients

Project Size & Rate

Minimum Project Size

$1,000+

Average Hourly Rate

$50 - $99/hr

Pricing Snapshot

Min Project Size

$1,000+

Avg Hourly Rate

$50 - $99/hr

Cost Rating

N/A

What Clients Have Said

“

"Zigrin Security delivers quality projects within budget and timeline expectations based on verified client feedback."

Based on verified reviews and internal benchmark data

MOST COMMON PROJECT SIZE

0 Reviews

this range

No distribution data available.

Select a service

Cybersecurity Assessments & Hardening

Other IT Consulting and SI

Industry Recognitions

Locations

Headquarters

os. Przyjaźni, nr 12, lok. 1

Poznan, Greater Poland, Poland 61-689

+48572793674

Reviews For Zigrin Security

Submit A Review

No Reviews Yet

Be the first to share your experience working with Zigrin Security.

Write a Review

Zigrin Security

Set Up By Edverise AI

Edverise AI built this profile by analyzing thousands of data points across the web. If you own this business, become an Edverise partner to manage and update your profile.

Overview

We increase the cost of cybercriminal activities.

Services

Focus

Industries

Clients

Portfolio

Securing company’s main website

MISP Penetration Testing

Projects & Clients

Project Size & Rate

Pricing Snapshot

$1,000+

$50 - $99/hr

N/A

What Clients Have Said

“

Select a service

Industry Recognitions

Yahoo! Finance

MISP Mention

Zigrin Security: Cake Fuzzer

Cake Fuzzer

Locations

Poznan, Greater Poland, Poland 61-689

Reviews For Zigrin Security

No Reviews Yet

Portfolio

Securing company’s main website

MISP Penetration Testing

Pricing Snapshot

$1,000+

$50 - $99/hr

N/A

What Clients Have Said

“

Select a service

Industry Recognitions

Yahoo! Finance

MISP Mention

Zigrin Security: Cake Fuzzer

Cake Fuzzer

Reviews For Zigrin Security

No Reviews Yet