Mystery Hacker Services

Our trademark Services offer tests what you want to know about your security policies.

<Level 1> Network Security, Policy Testing, and Physical .
<Level 2> Validate Risks
<Level 3> Exploit Hacking

Infrastructure Assessments
Tiburón 's security consultants will assess your infrastructure for potential weaknesses in the technologies, people, policies and processes that comprise and protect your IT environment. Our experts will perform network, operating system and wireless vulnerability assessments to ensure your critical business assets are protected from current and emerging threats.

Incident Response and Forensics
The Incident Response and Forensics service leverages the experience we have gained by identifying and responding to thousands of critical incidents on behalf of our enterprise Managed Security clients. Tiburón 's experts will help your enterprise develop a complete lifecycle to identify, respond and investigate threats to your enterprise. Our methodology is tightly aligned with the best practices outlined in SANS' Global Information Assurance Certification ( www.giac.org ) and encompasses planning, identification, containment, eradication, damage assessment, recovery, lessons learned and prosecution.

Web Application Assessments
Our experts will assess your web applications for vulnerabilities, mis-configurations and other security issues that could potentially lead to damaging attacks. Tiburón 's consultants will assess these applications and the supporting infrastructure from both an internal and external perspective. They will then work with your team to address any areas of weakness to ensure these critical applications are protected from malicious activity.

Penetration Tests
Tiburón 's consulting team possesses deep web application and infrastructure penetration testing experience. During this engagement, our experts will evaluate the security of your applications, systems and networks by approaching this infrastructure from an attacker's point of view. Tiburón 's consultants will gather information and then use this information to determine possible attack vectors. Our experts will then attempt to successfully exploit any weaknesses discovered and provide you with the results of their findings. Tiburón 's Penetration Tests will provide you with a deeper understanding about the security of your environment and the vectors attackers may take to conduct malicious activity.

Security Program Review
Our experts will evaluate all aspects of your security program to maximize its effectiveness. Tiburón 's consultants will review your policies, procedures, processes and infrastructure to identify any gaps. We will then work with your security team to establish an asset classification methodology and design solutions to address any areas of weakness that were identified. Whether you are implementing a new security program or are seeking to enhance your current program, Tiburón 's Security Program Review will help deliver better protection of your critical information assets.

PCI Compliance Assessments
Our Consultants can help your organization comply with PCI's Security Standard. Depending on your PCI Level, Tiburón will perform the necessary assessments as well as review the results of your vulnerability scans and produce the attestation required by Visa and MasterCard. Tiburón will work with your security team to remediate any gaps or vulnerabilities identified that may inhibit compliance.

Physical Security Assessments

Equally important to cyber security are the realms of physical security. Physical security assessments include evaluations of security requirements, including threats and vulnerabilities, policies and procedures, personnel response, mechanical and electronic security measures, access control, employment of closed circuit television, alarm systems and other measures necessary to ensure detection, assessment, response, delay, and neutralization of potential adversaries. Vulnerabilities and associated risks are identified, and recommended countermeasures are selected such as, improvements to facilities, equipment, personnel, plans, and procedures. Tiburón has the capability to assist. Physical security, as cyber, cuts across multiple industries and market verticals.

Some of our capability includes:

• Surveillance cameras/systems
• Control rooms / data centers
• Physical intrusion detection systems
• Structural hardening
• Blast containment
• Vehicle routing
• Access control
• Building control
• Fencing
• Gates
• Lighting
• Air filtration
• Safe Rooms (SCIF)