Ruff Security
Who we are
Our goal is to provide cyber security services to small and medium businesses that desire affordable security assessments with customized, prioritized remediation guidance and recommendations.
Our extensive experience helps us understand what truly matters to small businesses and how they can effectively secure their environment.
- Penetration, Web Application, and API testing for small businesses
- Security assessments with customized recommendations
- Certified security consultants
Cyber security is a top priority for every organization, no matter the size. Ruff Security can bring security assessments and consulting by qualified engineers to your organization today.
Contact us today to discuss your cyber security needs.
Contact UsCertified Security Consultants
Ruff Security's engineers hold multiple offensive and defensive certifications, including the Offensive Security Certified Professional (OSCP), Practical Network Penetration Tester (PNPT), and GIAC Certified Incident Handler (GCIH).
- Offensive Security Certified Professional (OSCP)
- GIAC Certified Incident Handler (GCIH)
- TCM Security Practical Network Penetration Tester (PNPT)
- TCM Security Practical Junior Penetration Tester (PJPT)
- CompTIA Security+, CySA+, PenTest+, CASP+
- Certified CyberDefender (CCD)
- Splunk Cloud Certified Admin, Splunk Certified Cybersecurity Defense Analyst
Consulting Services
Do you need guidance and recommendations from cyber security experts? We can provide general cyber security consulting to help you architect secure networks, evaluate new products, and implement fixes and projects to improve the security of your organization.
- 10+ years of System Administration and Cyber Security expertise
- Deployment and configuration of endpoint protection and Tenable/Nessus products
- Experienced and Splunk Certified Cloud Admin for SIEM deployment and integration
Vulnerability Assessments and Penetration Testing
If you need a vulnerability assessment or a penetration test of your intenral or external services, we are here to help.
Our Vulnerability Assessments include a vulnerability scan, but also have one of our security consultants manually scanning and enumerating the systems looking for vulnerabilities and prioritizing the vulnerabilities that are found. We provide a detailed report with recommendations and prioritized vulnerabilities to remediate first to maximize the time your staff spends implementing fixes for the biggest impact.
Internal and External Penetration Tests involve a simulated attacker attempting to break into your systems. This is the next level of a vulnerability assessment and not only includes identified vulnerabilities and recommendations, but also includes detailed attack paths that were taken to compromise systems and recommendations to close those vulnernabilities.
Supporting Small Businesses
Just because a small business doesn't have a well staffed security department, or a large IT security budget doesn't mean attackers will leave you alone.
Here at Ruff Security we want to provide our services to businesses of all sizes, and strive to provide affordable security assessments and consulting services. Our detailed reports will include customized and prioritized recommendations so you can make the most impact at securing your systems with limited budgets and IT staff.
Limited IT staff? No problem, we can also provide general consulting services to help implement any changes or architecture designs that you may require.
Need a Quote?
Contact us today to request a quote for your security assessment and consulting needs.
Services
What we can help with
Penetration Testing
Simulated attacker internal or external penetration testing. Receive a detailed report with identified vulnerabilities and attack path, with recommendations to mitigate identified vulnerabilities.
Web Application Testing
OWASP Top 10 testing of web applications. Looking for logic flaws, input sanitization, authorization issues and more.
API Testing
OWASP guided testing of your API endpoints, looking for logic flaws and vulnerabilities in input sanitization, and more.
Code Reviews
Our security consultants can review your code for known vulnerabiltiies, input sanitization issues, and logic flaws.
Password Audits
Audit your password policies and offline brute force attempts to crack user account passwords.
Wireless Assessments
Test your wireless infrastructure for known and easily exploited vulnerabilities.
Phishing Assessments
Send simulated phishing emails to your staff to test their awareness and susceptibility to phishing attacks.
Consulting Services
General consulting services to help you architect secure networks, and implement projects to improve the security of your organization.