Skip to content
info@rootsektor.de
24/7 emergency: +49 2932 465265-0 Request a pentest quote Report an emergency
Emergency

Contact

Phone & 24/7 emergency hotline+49 2932 465265-0 Emailinfo@rootsektor.de

Mon–Fri 8:00 a.m.–5:00 p.m. CET/CEST · outside business hours: 24/7 emergency hotline

Request a pentest quote Report an emergency

Services

IT Security Services at a Glance

From web applications to production plants, from Active Directory to the human factor: here you’ll find all of Rootsektor’s IT security services – from offensive security with penetration testing and red teaming to defensive security with prevention, monitoring, and incident response & forensics. For penetration tests and security assessments, you receive a fixed-price quote after scoping – including a free retest and a test certificate; incident response & forensics services and dark web monitoring are quoted individually.

Request a pentest quoteSchedule a consultation
  • Fixed price for pentests & assessments
  • Free retest
  • Quote within 24 hours

Offensive Security

Simulate attacks before real attackers do: penetration tests uncover exploitable vulnerabilities, while red teaming and targeted assessments show how far an attack would actually get. We explain methodology, testing approaches, and the process on our Penetration Testing and Security Services pages.

Penetration Testing 9 services

  • Web Applications & Online Shops

    We test web applications, online shops, and online platforms according to the OWASP Web Security Testing Guide – from authentication and access control to the business logic in the checkout. You learn which vulnerabilities can actually be exploited and how to close them.

    Learn more about Web Applications & Online Shops

  • API Penetration Testing

    REST, GraphQL, and SOAP interfaces connect your applications with data, apps, and partners. We test whether other users’ records can be retrieved, how securely access tokens are issued and validated, and whether responses reveal more than necessary – guided by the OWASP API Security Top 10.

    Learn more about API Penetration Testing

  • Mobile Apps (iOS & Android)

    How does your app store sensitive data on the device, how securely does it communicate with the backend, and can it be tampered with? We examine the app package, runtime behavior, and network traffic based on OWASP MASVS and MASTG.

    Learn more about Mobile Apps (iOS & Android)

  • Network & Infrastructure

    Externally from the internet or internally from the perspective of a compromised workstation: we show how far an attacker can get into your infrastructure. Active Directory, segmentation, and remote access are key areas we test.

    Learn more about Network & Infrastructure

  • Wireless Penetration Testing

    On-site, we test encryption, authentication, and guest networks, as well as the separation between Wi-Fi and the internal network. This includes searching for rogue access points and attacks on insecurely configured clients.

    Learn more about Wireless Penetration Testing

  • Cloud Penetration Testing

    Whether Microsoft Azure, AWS, or Google Cloud: we uncover misconfigurations, overly broad permissions, and publicly accessible resources. You see how an attacker could move through your cloud environment.

    Learn more about Cloud Penetration Testing

  • AI & LLM Penetration Testing

    Chatbots, AI assistants, and LLM integrations bring new attack surfaces with them. We test whether your system can be manipulated via prompt injection, discloses confidential data, or triggers unintended actions through connected tools – guided by the OWASP Top 10 for LLM Applications.

    Learn more about AI & LLM Penetration Testing

  • OT, ICS/SCADA & IoT

    We test controllers, control systems, and connected devices using methods tailored to ongoing operations. This ranges from segmentation between IT and OT to analyzing the firmware of an IoT device.

    Learn more about OT, ICS/SCADA & IoT

  • Social Engineering & Physical Testing

    We test whether attackers can obtain credentials via phishing, over the phone, or right at the reception desk – or make their way into your premises. We coordinate digital, analog, and physical scenarios with you in detail beforehand.

    Learn more about Social Engineering & Physical Testing

Assessments & Red Teaming 4 services

  • Red Teaming & APT Simulation

    We simulate a targeted attack over an extended period – technically, through social engineering, and, if you wish, physically. You find out whether your detection and response can withstand patient, well-prepared attackers.

    Learn more about Red Teaming & APT Simulation

  • Active Directory Assessment

    Active Directory is the master key to your network. We uncover dangerous permissions, insecure delegations, and attack paths all the way to domain takeover – before an attacker finds them.

    Learn more about Active Directory Assessment

  • OSINT Assessment

    What information about your organization, your systems, and your employees can be found publicly? We research like an attacker in the preparation phase and show which attacks could be derived from it.

    Learn more about OSINT Assessment

  • Code Review & Reverse Engineering

    We analyze source code for security-critical flaws and examine applications, apps, or firmware even when no source code is available. This uncovers vulnerabilities that are barely visible in a test from the outside.

    Learn more about Code Review & Reverse Engineering

Defensive Security

Help when an incident strikes, preparation for the worst case, and prevention in everyday operations: we contain and investigate attacks, manage vulnerabilities, harden systems, raise your team’s awareness, and detect data leaks early. In the event of an acute security incident, you can reach us outside business hours at +49 2932 465265-0 via our 24/7 emergency hotline – or use the Report an Emergency page.

Incident Response & Forensics 8 services

  • IT Emergency Response

    When a cyberattack hits, we help remotely and on-site: together with you, we build a clear picture of the situation, stop the spread, secure evidence, and support a clean recovery. Throughout, we keep an eye on reporting obligations and coordination with your cyber insurer.

    Learn more about IT Emergency Response

  • Ransomware Response

    Data encrypted, ransom demand on the screen? We contain the attack, investigate the entry point and data exfiltration, and support recovery from verified backups. We do not conduct ransom negotiations.

    Learn more about Ransomware Response

  • Digital Forensics

    We secure and analyze digital evidence, reconstruct the course of a security incident, and show which systems and data are affected. We also support you discreetly when an insider threat is suspected.

    Learn more about Digital Forensics

  • Malware Analysis

    We examine malicious software in an isolated analysis environment and determine what it can do, whom it communicates with, and how it persists. You receive indicators of compromise (IoCs) and detection rules for your defenses.

    Learn more about Malware Analysis

  • Compromise Assessment

    Are attackers already in your network? We search endpoints, logs, identities, and cloud services for traces of current and past attacks – even without a specific incident.

    Learn more about Compromise Assessment

  • Incident Response Planning

    An incident response plan and playbooks that fit your organization: together with you, we define roles, escalation and reporting channels, and communication for an emergency – with the reporting deadlines under the GDPR, NIS2, and DORA in mind.

    Learn more about Incident Response Planning

  • Crisis & Tabletop Exercises

    Executive management, IT, communications, and legal walk through a realistic cyberattack step by step – without touching your systems. This reveals where processes and responsibilities hold up and where they don’t.

    Learn more about Crisis & Tabletop Exercises

  • Forensic Readiness

    We prepare logging, retention, and evidence preservation so that a security incident can be investigated quickly and completely when it happens.

    Learn more about Forensic Readiness

Prevention & Monitoring 5 services

  • Vulnerability Assessment

    Systematically identify, assess, and prioritize by risk: a vulnerability assessment provides a broad overview of known vulnerabilities in your systems. It is ideal as a regular review between two penetration tests.

    Learn more about Vulnerability Assessment

  • Microsoft 365 & Azure Review

    We review the configuration of your Microsoft 365 tenant and your Azure environment – from Entra ID and Conditional Access to permissions, sharing, and logging. You receive concrete, prioritized hardening recommendations.

    Learn more about Microsoft 365 & Azure Review

  • AWS Security Review

    We assess the IAM policies, network configuration, storage services, and logging of your AWS environment against recognized best practices. That way, you close misconfigurations before they turn into a data leak.

    Learn more about AWS Security Review

  • Security Awareness & Phishing Simulation

    Realistic phishing campaigns, in-house awareness sessions, and online training turn your employees into an active line of defense. The results show where your team needs targeted support.

    Learn more about Security Awareness & Phishing Simulation

  • Dark Web Monitoring

    Using our own applications, we automatically monitor the dark web for leaked credentials, customer data, and business information belonging to your organization. If something is found, you are notified automatically; we then support you individually with suitable countermeasures.

    Learn more about Dark Web Monitoring

Why Rootsektor

What all our IT security services have in common

  • Vendor-independent

    We are not tied to any vendor or service provider. Our recommendations are based on your risk – not on product interests.

  • Experienced testers

    Certified penetration testers and security researchers with many years of hands-on experience in IT security, penetration testing, and social engineering.

  • Clear reports

    An executive summary for leadership, technical details with evidence for your team – and concrete recommendations for action for both.

  • Transparent terms

    For penetration tests and security assessments, you receive a fixed-price quote within 24 hours of scoping (on business days) – including a free retest of remediated vulnerabilities and a test certificate. Incident response & forensics services and dark web monitoring are quoted individually.

Not sure which service you need?

Tell us about your goals and your environment – we’ll suggest the right scope. For penetration tests and security assessments, you receive a fixed-price quote within 24 hours of scoping (on business days).

Request a quote

Talk to us about your project

Do you already have a specific test target in mind, or would you like some advice first? Call us at +49 2932 465265-0, email info@rootsektor.de, or use the form.

Fields marked with * are required.

We use your information solely to process your request. For more information, see our privacy policy. Please do not send login credentials through this form.