Penetration testing, or pen testing, is essentially hiring a security expert to ethically hack into your organization’s network and tell you what vulnerabilities exist, how an attacker may use them against you, and what the level of risk associated with those vulnerabilities is. Penetration test is commonly shortened to pen test, and the two can […]
We get it. It can be tough to sell or rationalize a penetration test or one-time security service to senior management that may not be aware of the importance of security for your organization. You are constantly peppered with questions like “can’t we spend our security budget on a blinky box that will protect our […]
Exciting news! Triaxiom has officially become a CREST Accredited Member Company and is now accredited in the Penetration Testing discipline. Becoming CREST certified speaks to the level of expertise, quality, and professionalism that our engineers incorporate into each and every assessment. “CREST is pleased to welcome Triaxiom Security as an accredited member company. Triaxiom Security has been through […]
In this blog, we are going to take a look at the Haddon Matrix to see how it can be used to help us in information security. The Haddon Matrix does not come from the security space, or really IT at all, but rather it is a term used in Injury Prevention. It has since […]
This Saturday, September 26th, 2020 will be the first virtual (and completely free to attendees) BSides Charlotte event. Since it’s virtual, anyone can attend if you just go and register for the event. It’ll feature 2 free workshops (which are probably already sold out) and a secure coding competition put on by Secure Code Warrior. […]
In today’s blog, we are going to look at how penetration testing has changed during the pandemic. With the increase in users working from home and less reliance on a corporate network, certain aspects of penetration testing have become easier, or more likely to succeed, while others have become much more difficult. We will explore […]
Information Security can be a difficult topic for organizations to understand and communicate about for a variety of reasons, but perhaps none more prevalent than the terminology that gets thrown around. As such a dynamic and fast-moving industry, it can be hard for inside veterans to get on the same page about certain topics, much […]
Incident response tabletop exercises are a great way to mature your overall security posture. As with most mock exercises, the more thought and effort you put into the execution, the more you will ultimately get out of it. Today, we explore tips to help improve your next incident response tabletop exercise. 1. Treat it Like […]
Here at Triaxiom, we believe in giving back to the community. We have created the Triaxiom Gives Back Program to help us do just that. From day 1 of founding Triaxiom, we agreed that a portion of our profits and our time would be used each year to give back to the community. The Triaxiom […]
We get asked more than one would think about the ability to run an “automated penetration test”. Today, we discuss what can be automated vs. what can not be automated and what you should consider before subscribing for automated penetration testing. What is an “automated penetration test”? We have seen plenty of companies touting automated […]
