Contact

Services

Expertise

We support ISMS-P assessment preparation and data protection reviews
as well as vulnerability testing for web, API and AI services.

Web & API
Penetration testing

ISMS-P assessment preparation · Data protection

We conduct technical reviews aligned with Korean assessment and security requirements.

We review authentication, access permissions and personal data processing functions, and document findings and remediation recommendations for assessment preparation. We also consider preliminary reviews for electronic financial services and the applicable scope of KISA infrastructure guidance.

AI security
assessment

Security for AI adoption and operation

We assess how AI accesses information and executes tools.

We test for prompt injection, RAG document access and information disclosure, and agent and API execution permissions. We record attack inputs, responses and repetition conditions to recommend improvements.

Support for development teams and organisations

Secure development & vulnerability management

We integrate security testing into development and deployment, and establish procedures to identify, remediate and track vulnerabilities in libraries.

Corporate security workshops

We teach phishing response, account protection and safe AI use through role-specific examples and practical exercises.
ANONYMISED / SAMPLE REPORT
FELSEN SECURITY / WEB ASSESSMENT

Security assessment
Sample report

An anonymised Korean-language excerpt following the format of an actual security assessment report. Client identifiers have been removed, and omitted passages are marked in the document.

Executive summary
Summarises the distribution of vulnerabilities and remediation priorities.
Scope and methodology
Specifies the assessment targets, validation methods and scope.
Detailed analysis excerpts
Explains missing HSTS headers and input format validation with sample responses.
Remediation guidance
Sets out the impact of vulnerabilities and the improvements required.

Korean · PDF · 8 pages · 739 KB

Download PDF Open in a new tab ↗

Anonymised and reconstructed from past assessment work. This does not describe a client’s current security status or confirm that remediation is complete.
PRIVACY NOTE

How inquiry information is handled

This site’s inquiry form does not send your entries to its own server or store them in browser storage. We do not use analytics tools or marketing cookies.

The email button opens your email app. You send the message yourself from that app. Include only the information needed for your inquiry, and do not send passwords, access tokens or actual client data.

Copying your inquiry and saving files take place on your device when you press the relevant button. The hosting provider may process connection information needed to operate the service.

For inquiries and requests to delete information: mingi.hong@gainge.com