Partners & Network
IT Security Partners and Network
Proven technology. Objective analysis.
For security in day-to-day operations, we work with two IT security partners: Greenbone for automated vulnerability management and Rapid7 for exposure management and detection & response. Rootsektor is also a participant in the Alliance for Cyber Security (Allianz für Cyber-Sicherheit), an initiative of the BSI (Germany’s Federal Office for Information Security). Our penetration tests and assessments remain vendor-independent – we evaluate your risk, not a product.
- Vendor-independent assessments
- Advice on selection & rollout
- Active in Germany and internationally
Our approach
Technology partners and vendor-independent analysis – how do they fit together?
A penetration test is a snapshot. It shows how far an attacker can get at a specific point in time. After that, your IT keeps changing: new systems go live, updates are installed, and new vulnerabilities are published every day. The time between two tests calls for tools that continuously check and monitor your environment.
That is exactly why we work with two vendors: Greenbone for regular, automated vulnerability scans and Rapid7 for exposure management and for detecting and responding to attacks. Our role is deliberately clear-cut – we advise on selection, prepare quotes in coordination with the vendor, support the rollout, and help integrate the tools into your existing processes.
These partnerships don’t change anything about our penetration tests and assessments. Scope, methodology, and evaluation are based on your engagement and recognized standards; we rate findings by CVSS and by their actual risk to your organization. The report explains, with reasons, whether a remediation step calls for a new tool or whether a configuration change will do – regardless of which products you use.
Our partners’ solutions are held to the same standard as everyone else’s. A scanner or a detection platform does not replace a penetration test – and whether detection actually triggers when it matters only becomes clear in a real-world test.
Our partners
Our IT security partners at a glance
-
Greenbone
Vulnerability management with OPENVAS SCAN, built on open source – automated scans, daily updated vulnerability tests, and compliance checks, for example against selected modules of BSI IT-Grundschutz (Germany’s baseline security methodology).
-
Rapid7
Exposure management and detection & response on the Command Platform – from asset inventory and risk-based vulnerability prioritization to attack detection, with optional round-the-clock monitoring by Rapid7 MDR.
Network
Participant in the Alliance for Cyber Security
The Alliance for Cyber Security (Allianz für Cyber-Sicherheit) is an initiative of Germany’s Federal Office for Information Security (BSI). It promotes exchange between business and government on cybersecurity issues and provides its participants with information resources from the BSI. Rootsektor is a participant in the Alliance for Cyber Security. Our participation is part of our engagement in the security community: we use the professional exchange and the BSI’s information to keep track of current developments.
Independence
Four principles behind our partnerships
A partnership only benefits you if it doesn’t color our analyses. Hold us to these principles.
-
Risk before product
Our reports evaluate vulnerabilities and risks – not vendors. Partnerships influence neither the scope nor how findings are rated.
-
Needs before tools
We start with your current situation, your risks, and your team’s capacity. Only then do we ask whether an additional tool makes sense at all.
-
Impact through processes
A scanner or a detection solution only pays off when someone acts on the results. That’s why we help integrate alerts into your patch, change, and incident processes.
-
Verify, don’t assume
Whether tools live up to their promises only becomes clear under realistic conditions. Penetration tests and red teaming exercises reveal gaps in coverage and detection.
Which solution fits your environment?
Vulnerability management, attack detection, or a penetration test first? We discuss your current situation and recommend the step that will noticeably advance your security – even if that isn’t a new product.
FAQ
Frequently asked questions about our partners and network
Didn’t find your question? Call us at +49 2932 465265-0 or email info@rootsektor.de.
Why does a vendor-independent pentest provider have technology partners?
Because penetration tests and operational tools do different jobs. A pentest shows how far an attacker can get at a specific point in time. Vulnerability management and attack detection, on the other hand, work continuously in the background. For this part, we recommend our technology partners’ solutions on request – our assessments remain unaffected.
Do the partnerships influence the results of your penetration tests?
No. Scope and methodology are based on your engagement and on public standards such as the OWASP Testing Guide, PTES, or the BSI guide “Durchführungskonzept für Penetrationstests” (implementation concept for penetration tests). We rate findings by CVSS and by their significance for your organization. We treat vulnerabilities in our partners’ products exactly like all others.
Do I have to use Greenbone or Rapid7 to work with Rootsektor?
No. Our penetration tests and security services work regardless of which products you use. Many remediation recommendations can be implemented with existing resources, for example through hardening, updates, or configuration changes.
We already use solutions from other vendors. Can you still help?
Yes. In penetration tests and assessments, we test your environment independently of the vendor. The effectiveness of existing firewalls, scanners, or detection systems can also be part of the scope – for example as part of a red teaming engagement.
What is the difference between a vulnerability scan and a penetration test?
A scan checks automatically and regularly for known vulnerabilities and misconfigurations – broad, but without context. A penetration test is manual: it chains individual vulnerabilities into realistic attack paths and shows what an attacker can actually achieve. The two complement each other: the scan for breadth and regularity, the pentest for depth. Learn more on our Penetration Testing page.
How does Rootsektor support the rollout of a partner solution?
We first clarify goals, environment, and resources. Based on that, we advise on the right option, support the rollout, and help define responsibilities, reporting channels, and workflows. You’ll find the detailed process on the Greenbone and Rapid7 pages – where you can also request a quote directly.
What does participation in the Alliance for Cyber Security mean?
The Alliance for Cyber Security is a BSI initiative for exchange between business and government. As a participant, Rootsektor uses the BSI’s information resources and the professional exchange within the initiative. Participation does not involve any certification or audit of our services.
Talk to us about your security strategy
Briefly describe your environment and your questions. We’ll get back to you with an honest assessment of which next step makes sense for you – a tool, a test, or both.