Web & API penetration testing · AI security assessment

Your service’s security,
from an attacker’s perspective.

For ISMS-P audit preparation and personal data protection reviews,
we identify vulnerabilities and document the basis for remediation.

Explore our services

Our expertise

Our approach

What clients and developers say

Excerpts from recommendations for our technical lead

Read the original recommendations

He identified vulnerabilities precisely and verified them with clear proofs of concept.

Frank HartmannHartmann Security Consulting · Commissioning client

The vulnerability reports are detailed and well structured, making it easy to understand the significance of an issue and reproduce the attack.

Miguel MoquillonSilverpeas · Software architect · Technical lead

Have a security challenge in mind?

Discuss a project
ANONYMISED / SAMPLE REPORT
FELSEN SECURITY / WEB ASSESSMENT

Security assessment
Sample report

An anonymised Korean-language excerpt following the format of an actual security assessment report. Client identifiers have been removed, and omitted passages are marked in the document.

Executive summary
Summarises the distribution of vulnerabilities and remediation priorities.
Scope and methodology
Specifies the assessment targets, validation methods and scope.
Detailed analysis excerpts
Explains missing HSTS headers and input format validation with sample responses.
Remediation guidance
Sets out the impact of vulnerabilities and the improvements required.

Korean · PDF · 8 pages · 739 KB

Anonymised and reconstructed from past assessment work. This does not describe a client’s current security status or confirm that remediation is complete.

PRIVACY NOTE

How inquiry information is handled

This site’s inquiry form does not send your entries to its own server or store them in browser storage. We do not use analytics tools or marketing cookies.

The email button opens your email app. You send the message yourself from that app. Include only the information needed for your inquiry, and do not send passwords, access tokens or actual client data.

Copying your inquiry and saving files take place on your device when you press the relevant button. The hosting provider may process connection information needed to operate the service.

For inquiries and requests to delete information: mingi.hong@gainge.com