Security Services

Secure Ideas offers a number of security services designed to ensure that your organization's security posture is where it should be. Below are descriptions of some of the services offered.

Web Application Penetration Testing

Secure Ideas is well known for its web application penetration testing. Our staff assesses and tests an organization's web applications to evaluate the risks these applications pose. When we assess a web application, simply finding XSS and SQL injection themselves are not useful to our clients. Instead, we evaluate the application with the business context in mind to provide a complete understanding of the risk and threats exposed.

Network Penetration Testing

Network penetration tests allow an organization to evaluate the external or internal risk posed by their network infrastructure. Secure Ideas' consultants have been assessing networks for years as well as building open-source tools that enhance these tests. Testing can be performed externally and internally depending on the scope and needs of the organization.

MySecurityScanner

MySecurityScanner provides a series of services that assess the security posture of an organization focusing on two main aspects, the network infrastructure and the externally facing web applications. MySecurity Scanner provides regular manual vulnerability assessments coupled with trained and vetted automated testing. More information regarding MySecurityScanner can be found here: MySecurityScanner

Mobile Device Testing

Due to the convenience of mobile devices and the speed of business in today's world, mobile devices are being implemented throughout organizations, industries, and the government with very little understanding of how they impact the security or what risks are exposed. Secure Ideas provides mobile device assessments that include mobile phones, smart phones, PDAs and tablets. We believe it is critical for management and technicians to understand how these platforms operate and integrate with existing IT infrastructure.

Social Engineering Testing

Although your non-technical staff does not need to understand the ins and outs of security, they need to understand they are prime targets for a pervasive type of attack known as social engineering. Secure Ideas can test the knowledge and readiness of your entire staff through social engineering assessments performed either virtually (phone, email) and/or physically (onsite).

Social Networking Assessments

Social networking, such as Facebook, Twitter, and MySpace, is a large part of how people and organizations interact with each other in today's world. Secure Ideas has been a leader in assessing how an organization makes use of social networks and the risks they pose. We can assist with development of usage policies for your staff as well as with ways to securely implement their usage within your network.

Security Architecture Review

A security architecture review is an analysis of an organization's technical infrastructure specifically looking at security. Our staff reviews documentation and conducts interviews focusing on the design and the reasons for various design decisions. Topics generally include: identification and authentication, authorization/access control, password management, security event logging, intrusion detection and reporting, firewalls, intrusion prevention systems, operating system maintenance, application configurations, emergency response, data backup and archiving, contingency planning, operations procedures and change control.

Presentations and Briefings

Secure Ideas speaks around the country on a variety of topics related to security. Our staff is available for speaking engagements and briefings. Where a presentation is based on a specific topic, a briefing is more personalized to a client's specific needs and interests.

Please contact us at info@secureideas.net to discuss how Secure Ideas can best assist your organization.

PROJECTS