Zigrin Security

For Zigrin Security

Is this your company?

Edverise AI compiled this profile from public information so buyers could find you. Claim it to edit every field, add your portfolio and respond to reviews.

Claim & verify for free

Manage the listing yourself. Verify by work email or company domain to earn the verified badge.

Claim this profile

Suggest an edit

Not ready to claim? Send a correction and our team will review and update verified factual errors.

Suggest an edit

Overview

$1,000+

Min Project Size

$50 - $99/hr

Avg Hourly Rate

2 - 9

Employees

2017

Year Founded

ABOUT ZIGRIN SECURITY

We increase the cost of cybercriminal activities.

We are a group of cybersecurity specialists dedicated to delivering thorough, practical security assessments for internal networks, applications, cloud solutions, e-commerce sites, and mobile devices. Our clientele and partners consist of businesses, non-governmental organizations, public institutions, and military entities from across Europe.

Languages Spoken

EnglishPolish

HIGHLIGHTS

$1,000+

Min Project Size

$50 - $99/hr

Avg Hourly Rate

2 - 9

Employees

2017

Year Founded

Services

Focus

Industries

Clients

Services Provided

50% Cybersecurity Assessments & Hardening

50% Other IT Consulting and SI

Portfolio

Securing company’s main website

Britenet

Britenet is a software development and outsourcing firm with a workforce exceeding 900 employees. The company focuses on developing systems that enhance operational processes across various business sectors. Its website serves as a platform to represent the brand to both current and potential clients, while also featuring job listings and a recruitment form for candidates to submit their resumes. Ensuring the security of the information hosted on the website was crucial for Britenet. A breach could severely damage the company’s reputation and lead to a loss of potential clients. The aim of the website penetration test was to uncover vulnerabilities and misconfigurations that might enable cyber adversaries to access sensitive information, alter the website, or prevent visitors from accessing it. We selected a black-box penetration test, simulating Internet-based threat actors, as the most effective approach. The focus was on discovering content and understanding the custom mechanisms used on the website. Consequently, we found 9 vulnerabilities, which varied from high-severity issues to informational findings that posed no immediate threat. Britenet addressed vulnerabilities that allowed for: 1. Unauthorized access to the application’s operating system and database housing its data. 2. Extraction of applicant information from submitted resumes. 3. Theft of source code and configuration files. 4. Execution of Denial-of-Service attacks that hindered visitor access to the website. 5. Theft of employee password hashes. 6. Impersonation of an employee in internal communications.

MISP Penetration Testing

NCSC - NATO Cyber Security Centre

MISP is an Open Source Threat Intelligence Platform utilized by various entities, including NATO, CiviCERT, CSSA Cyber Security Sharing & Analytics, and FIRST. However, it faces challenges due to its vast size and the involvement of hundreds of contributors. The source code sees updates every few days, with monthly releases on average, which heightens the risk of introducing new vulnerabilities. Additionally, with over 600 organizations globally using MISP, it becomes an attractive target for potential attacks. To address these vulnerabilities in web applications, we opted for several effective discovery methods: 1. Grey-box penetration testing—this is particularly suited for internal web applications or those mainly accessible to authenticated users, making it our primary approach since MISP requires user authentication. 2. Automated source code scanning—this provides a fast way to identify obvious vulnerabilities. 3. Manual source code review—to verify findings and eliminate false positives. 4. Examining past vulnerabilities—this approach involved looking for security issues similar to known vulnerabilities in older MISP versions due to its extensive attack surface. During our security assessment, we identified two vulnerabilities that the MISP team promptly addressed, one rated critical (9.9 out of 10) and the other of medium severity. The critical flaw had the potential to allow unauthorized access to sensitive information, theft of password hashes, user impersonation, and attacks on the internal infrastructure of victim organizations. The client opted to implement a silent patch and notify organizations about the vulnerability. All organizations that upgraded to the patched version of MISP were protected from the identified threats.

Projects & Clients

Project Size & Rate

Minimum Project Size

$1,000+

Average Hourly Rate

$50 - $99/hr

Pricing Snapshot

Min Project Size

$1,000+

Avg Hourly Rate

$50 - $99/hr

Cost Rating

N/A

What Clients Have Said

"Zigrin Security delivers quality projects within budget and timeline expectations based on verified client feedback."

Based on verified reviews and internal benchmark data

PROJECT BUDGETS

No budget data yet. Reviewers either haven't shared a project budget or kept theirs confidential.

Select a service

Cybersecurity Assessments & Hardening

Other IT Consulting and SI

Industry Recognitions

Yahoo! Finance

View source

MISP Mention

View source

Zigrin Security: Cake Fuzzer

View source

Cake Fuzzer

View source

Locations

Headquarters

os. Przyjaźni, nr 12, lok. 1

Poznan, Greater Poland, Poland 61-689

Reviews For Zigrin Security

Submit A Review

No Reviews Yet

Be the first to share your experience working with Zigrin Security.

Write a Review

Portfolio

Securing company’s main website

Britenet

MISP Penetration Testing

NCSC - NATO Cyber Security Centre