Digitalization and Information Security Services — Penetration Test


We examine your IT infrastructure from a hacker's perspective. In this process we scan a realistic cyberattack and identify vulnerabilities in your IT before attackers can exploit them. Our experts recommend suitable countermeasures and assist you in their implementation. It helps you to protect your systems and sensitive business and customer data from harmful unauthorized access and industrial espionage.

Penetration testing is a kind of test that compares the security risk assessment of products/ System/ Application against hacking attacks. It can intuitively reflect product safety, help customers to build safety information network, and prevent crisis to minimize the immeasurable losses. results of the penetration test can be used as supporting data for relevant safety or standard verification, and are necessary for the product to pass the verification.

Service area

Pentesting Services

• Web Application Vulnerability Assessment & Penetration Testing

•Web Services / API Penetration Testing

• Mobile Application (Android, iOS) Penetration Testing

• Network Penetration Testing (External, Internal)

• Active Directory Vulnerability Assessment & Penetration Testing

• Rich/Fat clients Penetration Testing

• Source code analysis

• Wireless Security Assessment

• QVS (Quick Vulnerability Scan)

Configuration Reviews

• Configuration Reviews of Network Devices (routers, switches, firewalls, etc.)



Audits

• Database Audits (MySQL, MSSQL, PLSQL) –Automated & Manual



Simulations

• Phishing Attack Simulation

• Advance Persistent Threat style attacks simulation


TÜV Rheinland, your reliable partner


• Project experience:

We have cooperated with many well-known enterprises for products such as smart home appliances, smart homes, and security monitoring. Through the evaluation results of the penetration test,we have helped our partners successfully complete relevant information security or privacy verification. Today, with the increasingly standardized safety and privacy requirements, TÜV Rheinland is supporting the enterprises who export the product and enter the overseas market.

• Professional service:

As an independent third-party, TÜV Rheinland provides companies and organizations with comprehensive information security from the needs of various industries from simple to complex, providing customization service. Not only can solve a variety of problems in compliance and verification, but also a professional consultant team of TÜV Rheinland for business app, product equipment, cloud computing and other services. It can also be fully tested and audited based on international standards and past cases, significantly improving the security of your industry modules and infrastructure.

• Global network:

We have penetration testing centers in Germany (i-sec), the US (Opensky), China, the Middle East and Southeast Asia. Our penetration testing laboratory uses Aryaka to establish networking interconnection systems. Through MS Team App to improve the communication and sharing systems, achieve international cooperation and exchange, and enhance the linkage of testing in different regions of the world.


Our Service

Service for Mastering Risk and Compliance

Identify IT risks and develop governance and compliance structures.   

Services for Advanced Cyber Defenses

Protect yourself from cyberattacks – with our supporting services.

Secure Cloud Adoption Services

We help you plan and implement a secure cloud solution.



  • TÜV Rheinland Greater China
    Ben Yu
    Tel：852 21921589
    Email：Ben.Yu@tuv.com