Penetration Testing Blog: All about pentests

passkeys-warum passwoerter ausgedient haben

Passkeys: Why Passwords Have Probably Become Outdated

12/03/2025

An analysis of the most frequently lists of the most frequently used passwords shows that even today, passwords tend not to be very complex. This suggests that password managers, which would make it easier to create secure passwords, are rarely being used. As a consequence, many service providers rely on the addition of a second factor during the login process in order to reduce the dependency on the password. However, this solution is not an optimal measure as it does not fully address the problem of password security. A promising approach that could offer an alternative to passwords is the use of passkeys.

Network Penetration Test

15/01/2025

In an increasingly digitalized world, companies of all sizes and in all industries are at risk of cyberattacks. It is therefore crucial for businesses to prioritize network security in order to protect sensitive information and business processes. Every year, thousands of attacks on corporate networks are recorded, whether by hackers, insiders, or automated malware. The consequences of such attacks can be severe, including data loss, business interruptions, significant financial losses, and a loss of customer trust.

Vulnerability Scanners and How to Protect Your Company From and With Them

01/02/2023

Vulnerability scanners are often used during security audits. The goal: to be one step ahead of the cybercriminals!

Penetration Testing vs. Bug Bounty Programs – What Are the Differences?

19/01/2023

A bug bounty program and a penetration test are both important measures to improve the security level of a system. However, there are important differentiators between the two that need to be understood before deciding which one to use.

The Differences Between Penetration Test and Red Teaming

01/06/2022

Penetration test and red teaming are cybersecurity terms. But what exactly is red teaming? And what is a penetration test all about? What are the differences between the two terms?

Become a Proven Web App Penetration Tester With the Web Security Academy

11/04/2022

What are the most common security vulnerabilities in web applications? What does an attacker need to do to find and exploit them? And how can developers protect their web applications against them? Answers to these questions as well as practical hands-on examples are provided by PortSwigger’s Web Security Academy.

CAA, the new control against unintended certificate mis-issue

22/09/2017

by Gregor Wegberg With the introduction of Certification Authority Authorization (CAA) domain holders can specify the Certificate Authorities authorized to issue certificates for the domain. This article in German explains CAA and its use.

Penetration Testing