Pentest24

Pentest24® is an IT security services firm (penetration testing and consulting) operating from Germany. The organisation presents itself as providing BSI-aligned penetration testing and related IT-security services and references activity across German companies and public-sector bodies. The site identifies Jan Bindig as Geschäftsführer and notes ongoing operations in Germany; clients and project descriptions imply services delivered to firms, authorities and industry sectors within Germany.

Services and Capabilities

• Penetration testing: external, internal, web application, mobile application, cloud, network, wireless and endpoint tests that produce technical reports and remediation recommendations.
• Specialised security testing: IoT, embedded systems, hardware/firmware, SCADA/industrial control systems, supply-chain and vehicle (i-KFZ) security assessments.
• Social-engineering and physical security assessments: controlled phishing campaigns, telephone-based social engineering and on-site physical penetration tests of buildings, access controls and computer rooms.
• Vulnerability management and managed security services: vulnerability scanning, ongoing monitoring, prioritisation and tracking of remediation (Schwachstellenmanagement).
• Security governance and compliance deliverables: IT-security concepts, IT emergency/incident plans, GDPR-related documentation and security reporting aligned to BSI guidance.
• Training and certification support: staff awareness training, IT-Security-Schulungen and preparation for independent certifications (references to ITQ GmbH procedures).

Industry Focus

• Public sector and regulated authorities: penetration testing and audits for organisations following BSI guidance and regulatory standards.
• Automotive and vehicle services: security assessments for vehicle-related systems including i-KFZ environments and embedded automotive systems.
• Industrial/OT environments: SCADA and industrial control system testing and assessments of automation components.
• Transport, distribution and supply chains: supply-chain penetration testing and analysis of transport/distribution systems referenced in service descriptions.
• General commercial enterprises: application, network and infrastructure testing across corporate IT environments.

Technology and Delivery Approach

• Assessments follow a five-phase BSI-recommended process: preparation, information gathering, evaluation, execution of tests and report generation.
• Deliverables include technical test reports, remediation recommendations, IT emergency plans and optionally bilingual reports (German/English).
• Testing combines automated scanners and manual analysis; the site lists industry tools (for example Metasploit, Burp Suite, Nmap and others) as part of the toolset.
• On-site and remote engagements are offered; services include both one-off audits and ongoing managed security activities such as monitoring and vulnerability management.
• Red teaming and method-mixed attack simulations are provided to assess detection and response across technical and human controls.