Service
Introducing TantoSec’s Build Pipeline Security Assessment
We attack your CI/CD pipeline the way an adversary would, to show how far a malicious or compromised developer could get.
Marco Cantarella
About the author
Posts
Methodology
Is Pentesting Dead?
We don’t think so, but perhaps the one-size-fits-all pentest should be. Why automated pentesting mostly isn’t pentesting, and what to ask of your provider.
Methodology
Why White Box?
An attacker has as long as it takes to learn your system, and a pentester has days. Source code and documentation even up the ledger.
Compliance
CORIE: Regulating for Advanced Cyber Security Services
How Australia’s financial regulators want institutions red teamed, guided by threat intelligence.
Compliance
Independence and Conflicts in Cyber Security
The UK’s big accounting firms must split off their audit arms. Should the security firm that built your controls be the one that tests them?
Methodology
Which Offensive Cyber Security Services Should I Use?
Match the service to your security maturity and the threats you face. A premature red team engagement may uncover problems that take years to fix.