Our focus. more security.
Security Audits
NIS-2. KRITIS. Supply Chain. Cloud. Due Diligence.
PCI & Payment Security
DSS. SSF. P2PE. 3DS. PIN. SWIFT. Consulting. Assessments. Certifications. ASV Scans.
Pentests & Red Teaming
Systems. Applications. Mainframes. SAP. Cloud. AD. Red Team Assessments.
Security Analyses
Security Scans. Code Review. Incident Response. Forensik. Vulnerability Management.
Security Consulting: ISMS / ISO 27001
Strategy. Consulting. Implementation. Audit Readiness.
Security Consulting: InfoSec in Finance
DORA. Regulatory Requirements. Strategy. Consulting. Implementation.
~200
Employees
1994
Founding year
3
Locations
(Neu-Isenburg, Cologne, Munich)
> 900
Customers worldwide
News
Assessing the Security of AI Chatbots: Pentests Uncover Critical Vulnerabilities in LLM Platforms
Artificial intelligence (AI) is transforming the business world. Large language model (LLM) platforms in particular are increasingly finding their way into companies across a wide range of industries. Many are choosing in-house hosted solutions to protect sensitive...
Security Advisories on OrangeHRM und memos
The pentest professionals at usd HeroLab identified multiple vulnerabilities in the applications OrangeHRM and memos during web application pentests. The vulnerabilities were reported to the vendors as part of the Responsible Disclosure Policy. Detailed information on...
DORA Deep Dive: Threat-Led Penetration Testing (TLPT)
Since the publication of the original blog post in May 2024, the final version of the RTS for TLPT has been released. The blog post has been updated accordingly and now covers the current requirements. The Digital Operational Resilience Act (DORA) came into force on...
Our certifications and accreditations
