Prove exploitability. Examine attack paths and control effectiveness.
Level 2 examines whether vulnerabilities can be exploited and under which conditions. We select assessment areas around your systems and objectives: trace attack paths, demonstrate impact and identify specific actions.
The agreed scope can cover sign-in, sessions, access control, tenant isolation, business logic and input handling. For APIs, we assess relevant objects, functions and workflows. Test accounts and expected permissions are defined in advance.
For approved systems, we assess agreed services, configurations, identities and trust relationships. The engagement defines targets, environments, permissions and assessment depth. Cloud configuration reviews and active infrastructure pentests each have a clearly defined scope.
We check vulnerability signals for applicability and prerequisites, then validate exploitability under controlled conditions. Reporting clearly distinguishes confirmed vulnerabilities, unconfirmed observations and tests that remain inconclusive.
Selected attack steps form an agreed scenario. We assess the prerequisites, permissions and transitions along an attack path. For adversary emulation, we also document techniques, sequence and MITRE ATT&CK references, alongside the steps actually executed and their evidence.
Breach and Attack Simulation and control validation assess how agreed controls respond to defined tests. Execution, blocking, logging and received alerts are evaluated separately. We agree suitable logs and other supporting evidence in advance.
A clear report on the agreed tests, with evidenced findings, open questions and prioritized actions. Assessed attack paths and control responses are documented with supporting evidence.
Testing covers the systems and scenarios agreed in writing. Remediation is commissioned separately.
Priorities reflect technical impact, reachability and business criticality. CVSS, EPSS and CISA KEV support the assessment of applicable CVE findings. Issues without a CVE, such as faulty tenant isolation, are also assessed in the context of your systems.
You receive a report in German or English with an executive overview, technical evidence, coverage, open questions and prioritized actions. An agreed retest checks remediation against the original objective. Changes can be commissioned separately through Cyberkern Fix.
Describe your project in the enquiry form. We agree assessment areas, systems, permissions, exclusions, test windows and stop criteria in writing. The engagement covers the selected tests; full red teaming, covert long-term operations and unrestricted attacks are excluded.
We agree systems, scope and timing in writing.
