One provider for all your IT security needs
Oppida has been providing services for 18+ years to 2000+ clients in industries such as banking, insurance, finance, information technology, defense, online gambling, and more.
Technical Testing
Performing technical attacks on your infrastructure, your networks, your devices, and your applications, as well as reviewing source code and configurations for compliance with industry best practices.
Compliance
Reviewing and updating your policies, procedures, guidelines, and training material to ensure your practices are compliant with legal and industry-specific requirements.
Social Engineering
Turning your employees and third party providers against you using phishing, impersonation, and manipulation in order to get access to sensitive assets.
Red Team
Full scope, realistic attack simulation where we emulate a real-life adversary and attempt to access your most sensitive assets using a combination of technical attacks, physical intrusion, and social engineering.
Our Process
Here is an overview of how we approach each audit.
Plan
- Understand your needs
- Build the audit team
- Provide an audit plan
- Kick-off meeting
Audit
- Review documentation
- Interview key people
- Perform technical testing
- Analyze evidences
Report
- Consolidate audit findings
- Assist with gap remediation
- Present conclusions
- Perform re-testing
Our Services
We provide a wide range of IT security services.
Source Code Reviews
Applications, operating systems, hypervisors, and firmwares.
Penetration Testing
Websites, webservices, networks, and infrastructures.
Compliance Audits
Assessment of the practices, procedures, technical controls, personnel, and other resources against best practices.
Red Team
Network attacks, physical intrusion, and social engineering.
References
Here are some companies we have been working with.
Visa: Web penetration testing, network penetration testing, risk analysis.
Airbus: Risk analysis, network penetration testing, source code review, organizational audit and advising.
BNP Paribas: Web penetration testing, mobile application reviews, source code reviews.
Société Générale: Web penetration testing, source code reviews, VoIP penetration testing, configuration audits.
Thales: Risk analysis, network penetration testing, product evaluation.
Pokerstars: Infrastructure penetration testing, source code reviews, configuration audits, certifications.
EADS: Risk analysis, product evaluation, source code reviews.
Atos: Web penetration testing, source code reviews, product evaluation, organizational audits.
bwin: Source code reviews, certification.
Betstars: Infrastructure penetration testing, source code reviews, configuration audits, certifications.
DCNS: Risk analysis, source code reviews, product evaluation.
Crédit Agricole: Web penetration testing, source code reviews, organizational audits.
Areva: Risk analysis, network penetration testing, organizational audit.