Technical assessment service
Technical examination of vulnerabilities, configurations, log data, incidents and documented security measures.
Typical technical questions
- Which vulnerability or misconfiguration can be demonstrated in the documented system state?
- Which events can be reconstructed from available logs and timestamps?
- Which protection measures were technically present, enabled and demonstrably effective?
- Which alternative technical explanations remain plausible for an observed security event?
Methodological approach
The authorised examination scope is delimited before testing begins. System state, configuration, log sources, time context, access rights and available evidence are documented. The absence of a finding is not equated with proof of complete security.
Examination scope
- Technical examination of vulnerabilities and misconfigurations.
- Timeline analysis of log and event data.
- Verification of security measures against technical evidence.
- Reconstruction of incident sequences and system states.
- Documentation of uncertainty, missing data and statement boundaries.
Security testing is performed only within the agreed and authorised scope. Technical finding, organisational approval and legal evaluation remain separate.
Professional literature and technical basis
Own publications can provide additional methodological context. Concrete security statements are based on appropriate primary sources, maintained vendor documentation, standards and project-specific evidence.
Related technical knowledge
Initial technical classification of an enquiry
Before accepting an assignment, the technical question, subject of examination, available records, potential conflicts of interest and the required scope are reviewed. An individual non-binding proposal can then be prepared.
Contact Mathias Ellmann