-
Assessments
-
External
- Perimeter Security Assessment & Penetration Testing (PSA)
- Blind Visibility and Exposure Analysis (BVEA)
- Distributed Denial of Service Assessment (DDOS)
External/Internal
- Office 365 Security Assessment (O365SA)
- Wireless Security Assessment (WSA)
- Web Application Security Assessment (WASA)
- Cloud Security Assessment (CloudSA)
Internal
- Critical Asset Security Assessment (CASA)
- LAN Security Assessment (LANSA)
Platform-specific
- Network Infrastructure Security Assessment (NISA)
- Active Directory Security Assessment (ADSA)
- Microsoft Server Security Assessment (MSSA)
- UNIX/Linux Server Security Assessment (NIXSA)
- Virtualization Security Assessment (VSA)
-
- Compliance
- Verticals
- Bundles
- Training
- Templates
- Quote
Blog: CheckPoint Zonealarm Anti-virus exploit zero-day by illumant (View Blog)
Local Exploitation of WCF Services within ZoneAlarm Anti-Virus Software to Escalate Privileges (Click here to view post)
Illumant has vast experience working with cities, counties, municipalities
Our Clients
Our local government clients include various cities and counties, such as:
- Burbank, CA
- Avondale, AZ
- Jackson County, OR
- Bryan, TX
- Alameda Municipal Power, CA
- Western Municipal Water District, CA
- And more ...
Case Study
The following case study describes how we helped a mid-size US city improve its security posture to better protect itself against cyber-attacks by identifying technical security weaknesses, by testing employee awareness, by performing cyber-attack simulation through black box pen testing, and by providing recommendations to bolster security.
Municipalities and Government
Cities, counties, municipal utilities, state and federal government agencies are on the frontlines of cyber-attacks. The services provided to its customers are broad, and infrastructure is distributed. Security compliance issues may include PCI, HIPAA, NERC as well as state security and privacy regulations. Illumant has vast experience working with cities, counties, municipalities to offer array of assessment services to help these organizations address their security issues and requirements.
The following are services that are relevant to and popular with municipal, state and federal government agencies:
Popular Compliance Services:
CJIS Compliance ‐ Illumant's CJIS-C service provides straightforward gap analysis and readiness services to assess compliance with the CJIS Security Policy and to remedy gaps, and to prepare for scheduled, and unannounced audits. {Read more}
PCI-DSS Compliance ‐ Our PCI-C service is a one-stop solution for on-going compliance with PCI-DSS. Illumant prepares applicable SAQs and AOCs, provides an appliance for pen-testing and wireless and internal vulnerability assessments, and addresses quarterly ASV scanning. {Read more}
HIPAA/HITECH Security Rule Compliance and Security Risk Assessment ‐ Illumant's HIPAA-C service is a straightforward solution for addressing the compliance and security risk analysis requirements of the HIPAA Security Rule and the HITECH Act, and for addressing a core objective of "Meaningful Use". Illumant leverages a refined model for conducting the required HIPAA security risk analysis, and assesses an organization's safeguards to ascertain compliance with the HIPAA security rule. The assessment includes internal and external technical vulnerability analysis, technical and physical penetration testing, and social engineering. Illumant provides practical remediation advice for addressing gaps and shoring up compliance. {Read more}
NERC CIP-v5 Compliance ‐ Illumant's CIPv5-C service is a straightforward solution for addressing the compliance and security risk analysis requirements of the CIP. {Read more}
Popular Assessment Services
Perimeter Security Assessment & Penetration Testing (PSA) ‐ Provides assurance that Internet-facing networks and systems are protected from hackers/malware (aka the hacker's perspective). {Read more}
Critical Asset Security Assessment (CASA) ‐ Internal vulnerability analysis and penetration testing of mission-critical assets including applications, servers, routers, and switches for validation of layered-security and defense in depth. {Read more}
LAN Security Assessment (LANSA) ‐ Provides assurance that LANs are well secured including end-user systems such as desktops and laptops. As well as LAN servers, and other LAN devices. {Read more}
Social Engineering (SocEng) ‐ Targets the human element to test awareness of users to potential security threats, by performing simulated phishing, planted media, pretext calling, and social networking attacks, and to test exposure to social engineering. {Read more}
Advanced Black Box Penetration Testing (BBPen) ‐ A premier service that simulates real-world cyber-attacks against your organization. The BBPen is a capture-the-flag exercise using technical and social pen testing techniques to test how well protected you are against breaches {Read more}
Policies Procedures and Practices Assessment (PPPA) ‐ Ensures that documented IT policies and procedures, and associated practices, are aligned with best-practices and applicable regulatory requirements. The PPPA is a gap analysis and the first place to start towards compliance with best-practices, regulatory requirements, and standards, such as HIPAA, SOC, PCI, CIPv5, NIST, ISO, DFARS, GLBA, SOX, etc. {Read more}
Assessments
- Perimeter Security Assessment & Penetration Testing (PSA)
- Blind Visibility and Exposure Analysis (BVEA)
- Distributed Denial of Service Assessment (DDOS)
- Office 365 Security Assessment (O365SA)
- Wireless Security Assessment (WSA)
- Web Application Security Assessment (WASA)
- Cloud Security Assessment (CloudSA)
- Critical Asset Security Assessment (CASA)
- LAN Security Assessment (LANSA)
- Network Infrastructure Security Assessment (NISA)
- Active Directory Security Assessment (ADSA)
- Microsoft Server Security Assessment (MSSA)
- UNIX/Linux Server Security Assessment (NixSA)
- Virtualization Security Assessment (VSA)
Security Awareness Training
Other Links
Contact Information
Palo Alto California, US
Phone: 650 961 5911
Fax: 650 961 5912
Email: [email protected]
