Services

What we offer

Two services today. Both test what the internet can reach, both run under written authorization, and both end in a report an engineer can act on. We list only what we deliver now.

Point in time

External penetration testing

A full engagement against the domains, web applications and APIs you expose. The OWASP Web Security Testing Guide as the baseline, plus the modern attack classes, with coverage tracked per asset so gaps are visible instead of hidden.

Web applications, APIs, authentication flows
Exposed services, TLS, email security records
Every finding reproduced by an analyst
Report, debrief and a retest on request

Offered now

How the test works

Recurring

Attack surface monitoring

A point-in-time test is true on the day it ends. Your attack surface is not. Monitoring re-maps what you expose on an agreed schedule, reports what changed since the last run and re-tests the exposed assets.

Scheduled re-mapping of your external surface
New and removed assets since the last run
Re-testing of exposed services and applications
A short report each cycle, built on the same inventory

Offered now

How monitoring works

Internal networks, Active Directory, cloud configuration reviews and red teaming are outside what Tyvar offers today. If you need one of them, say so in your enquiry and we will tell you honestly whether and when we can help.

How to start

Tell us which domains and applications you want tested. We reply within two business days with a proposed scope and a time for the call.

Request a scoping call

[email protected] +49 162 1320798 Replies in English or German.