Security-Review

What is a Security Review?

A Security Review inspects IT systems and applications for vulnerabilities. Codepurple's specialists try to penetrate your systems (penetration test) and thus identify security breaches.

How does the Security Review work?

Together with the customer we define the scope of the Security Review. The systems to be examined are identified and the time frame is defined. After the analysis and penetration tests have been carried out, the results are discussed with the client in a debriefing.

What does a security review cost?

The cost depends on the scope of the Security Review and the number of systems. The scope is determined with the customer.

What is the result?

The result of the review is a detailed report, which records all the checks performed and their results.

Are recurring reviews worth it?

With every change to the system, new potential vulnerabilities can arise. After major updates, it is recommended to perform an extensive review. This allows new security vulnerabilities to be identified at an early stage.

What is the difference to the Closed Bug Bounty?

In the Security Review, we take a broad look at all IT systems. It gives you an overview of the overall state of your systems. With the Closed Bug Bounty, we only examine the systems where we see specific attack scenarios.

Advantages

• Extensive investigation of the IT systems
• Clearly defined scope
• Clear cost structure
• Detailed report what was investigated and what vulnerabilities were found
• Overall view of the state of the IT systems

How big is the risk?

Both your financial risk and the risk that your IT systems are no longer available is small. Thanks to the defined scope, the costs are clearly defined. Hackers act like surgeons, their aim is not to cause damage, but to find vulnerabilities and not to interfere with the IT systems.

Are hackers evil?

The term hacker often has a negative connotation. This is unjustified. Most hackers have no evil or criminal intentions. So the term "ethical hacker" or "white-hat hacker" has become established for the friendly hackers.