Services

Our security experts will advise you on how to monitor the security of your cyber environment, detect vulnerabilities in your network or apps, improve the performance of your information security solutions, and ensure the security of your sensitive data.

We identify security flaws in components of our customers’ IT environments. C – Core HK’s security team carefully examines the level of protection of your IT infrastructure and develops measures to reduce the number of security flaws within your network and apps.

Security testing services include the following:

Audit of infrastructure security

Our security team examines your IT infrastructure for flaws in the following areas:

• Policies and procedures for security.
• Security monitoring software.
• Control of physical access.
• Configuration administration.
• Version management.

Evaluation of compliance

Our security engineers scan your IT environment and its components both automatically and manually to ensure compliance with PCI DSS, HIPAA, and other regulations. The security team issues you a detailed attestation letter based on the testing results.

Evaluation of Vulnerabilities

C – Core HK Limited performs automated and manual security audits on their customers’ IT infrastructures to detect vulnerabilities. Our network security testing team finds, quantifies, and ranks network security flaws. Based on the assessment results, we make recommendations to our customers to help them eliminate security risks.

Testing for penetration

The security testing team at C – Core HK identifies system vulnerabilities, validates existing security measures, and provides a detailed remediation roadmap. The team performs penetration testing using one of three approaches, using special tools and industry-specific test scenarios:

• Testing with a black box. We work in realistic conditions with limited knowledge of your network and no knowledge of the security policies, network structure, software, or network protection employed.
• Testing with a grey box. We examine your system with some network information, such as user login details, architecture diagrams, or a network overview.
• Testing in a white box. Using administrative privileges and access to server configuration files, database encryption principles, source code, or architecture documentation, we identify potential flaws.

Stress testing entails simulating DDoS / DoS attacks.

C – Core HK’s security testing team assesses the stability of your infrastructure and its components by assessing them beyond their normal operational capacity using specialized tools such as Siege and Apache JMeter. We use our knowledge to simulate denial of service (DoS) or distributed denial of service (DDoS) attacks on your network or applications in order to:

• Determine whether the robustness of software or hardware under stress is satisfactory.
• Determine potential errors that may occur as a result of system overloading.

• Application Security

Applications that are poorly coded and inadequately protected can put a company at risk and result in data breaches. C – Core HK provides their skills and knowledge in assessing and testing application security, as well as assisting their customers in achieving effective protection of corporate data stored locally or remotely.

Each programming language has quirks that can lead to security flaws during development. C – Core HK’s security experts identify existing flaws in your applications before they go live.

Our security engineers perform automated and manual security code reviews and, if necessary, engage senior developers and architects to assist you in:

• Detect errors introduced into an application during development in order to improve software quality and increase its level of protection.
• Highlight weak points in your app’s source code where vulnerabilities could occur.
• Determine the most cost-effective methods for eliminating application security flaws.

With the proliferation of mobile devices, mobile applications, and programs used within corporate networks, businesses must manage and secure their use.

Our security testing team has extensive experience installing and configuring mobile device management and mobile application management solutions to ensure mobile security. We can fine-tune the mobile security services you choose to use and properly set the necessary policies for you to:

• Check that devices and applications are in accordance with your internal security policies and requirements.
• Control how your employees use their mobile devices and apps to access and share corporate information.

C -Core HK Limited assists their clients in securing their cloud solutions. We have the necessary experience as a Gold Microsoft Business Partner to tune special security components, allowing security management and threat protection across cloud workloads.

The security engineers at C – Core HK can implement appropriate cloud security measures and configure cloud protection solutions to ensure:

• Constant and efficient monitoring of your cloud application security.
• Analysis of your cloud solutions’ event logs and prompt detection of suspicious activity
• Remediation of potential security flaws in your cloud environment.
• Implementing the necessary security policies to ensure that your cloud solutions meet the necessary security standards.

C – Core HK’s security experts ensure that a website, web app, or web service is properly protected.

• Our security testing team performs vulnerability assessments to ensure that appropriate encryption, authentication, and other security measures are in place in a web app, web service, or website.
• Following the evaluation results, our security engineers provide valuable recommendations to customers on how to improve the security level of their web solutions.
• We provide penetration testing services to provide customers with detailed information on real-world security threats they may face.