Our Focus. more security.
Security Audits
NIS-2. KRITIS. Supply Chain. Cloud. Due Diligence.
PCI & Payment Security
DSS. SSF. P2PE. 3DS. PIN. SWIFT. Consulting. Assessments. Certifications. ASV Scans.
Pentests & Red Teaming
Systems. Applications. Mainframes. SAP. Cloud. AD. Red Team Assessments.
Security Analyses
Security Scans. Code Review. Incident Response. Forensik. Vulnerability Management.
Security Consulting: ISMS / ISO 27001
Strategy. Consulting. Implementation. Audit Readiness.
Security Consulting: InfoSec in Finance
DORA. Regulatory Requirements. Strategy. Consulting. Implementation.
~200
Employees
1994
Founding year
3
Locations
(Neu-Isenburg, Cologne, Munich)
> 900
Customers worldwide
Our Clients
Our Certifications and Accreditations
Our Commitment to the Community
News
Effectively Implementing Third-Party Risk Management under DORA
The Digital Operational Resilience Act (DORA) is now a reality for financial institutions and their service providers. In 2026, the focus will shift to the practical implementation of third-party risk management at financial institutions, as BaFin will conduct its...
Deep Dive Into Red Teaming: Physical Pentesting. How Resilient Is Your Organization?
As a security manager, you protect your systems and processes every day and invest in awareness training. However, experience shows that physical attacks are an often underestimated attack vector. Attackers combine digital and physical methods. This is where Red...
Security Advisories on Kofax Communication Server and ArcGIS Arcade
The pentest professionals at usd HeroLab examined Kofax Communication Server (KCS) and ArcGIS scripting language Arcade as part of web application pentests and identified several vulnerabilities. Two of the vulnerabilities result from...