Certifications and Expertise

A certification alone does not prove competence, but it does show that a specialist has passed hands-on exams in a given field. The certifications held by our team are listed below.

• Network, Active Directory and red teaming: OSCP, OSEP, CRTO, eCPTXv2
• Web application security: eWPTX / eWPTXv2
• Mobile application security: eMAPT
• General ethical hacking: CEH
• National personnel certificates (TSE): Senior Penetration Tester, Certified Penetration Tester

• ISO/IEC 27001:2022 Information Security Management System certificate (certificate image and number to be added on receipt)

• Web application and API security testing
• Mobile application security testing (Android and iOS)
• Internal and external network penetration testing, Active Directory security assessment
• Cloud environment security testing
• Digital forensic examination of computers, mobile devices and storage media
• Evidence integrity, forensic imaging and hash verification

No single standard covers every type of test, so we apply the frameworks below depending on the target system and the type of engagement.

• OWASP: We use checklists based on the OWASP WSTG (Web Security Testing Guide) for web applications, and OWASP MASVS and MASTG for mobile applications.
• PTES (Penetration Testing Execution Standard): We use it to define the phases of a penetration test, from pre-engagement to reporting.
• NIST SP 800-115: The US National Institute of Standards and Technology's technical guide to information security testing and assessment; we use it as a reference for planning and executing tests.
• Approach aligned with ISO/IEC 27037: We follow the principles of this international guideline for the identification, collection, acquisition and preservation of digital evidence in our forensic examinations.
• CVSS: We score the technical severity of findings using the widely adopted Common Vulnerability Scoring System.

Our team regularly tries out new attack techniques and tools in a lab environment and shares what it learns through internal training. This page is updated whenever a new certification is earned.