One of the most important areas that organizations overlooks is the internal threat. Your employees can serve you well, at the same time, they can also do the most harm. We aim to replicate this exact scenario by taking on the role of an employee within your organization. You provide us with the desk, the network access and authorization and we will tell you how your employees can damage your network, and ultimately your reputation.
What we do : We eavesdrop on unsecured traffic. So if you do not run your applications over SSL, then we will collect things like login credentials and private & confidential information to use to gain additional access to applications and systems we are not authorized to access. Imagine a System Administrator gaining access to your payroll information. This is clearly a deviation from policy. We will attempt to gain unauthorized access to PC
