CPCECHO launches attack simulation service

CPCECHO presents an attack simulation platform based on Penetration Testing so that companies can assess their level of exposure to cyberthreats and implement security policies that protect their infrastructures and data.

Companies have been investing in protecting their corporate perimeter, their externally accessible applications and their internal networks. With remote work and the need for mobility, the increased use of home or public networks with a low level of security has raised the risk of security breaches, because defence barriers are typically not controllable by organisations.

CPCECHO presents a Penetration Testing attack simulation service to address the slowness that characterises the process of executing a set of attacks, issuing a readable report and applying corrective measures.

Continuous, automated tests understood by the whole organisation

To meet this challenge, CPCECHO offers a service that automates attacks, runs them in a few minutes and delivers in real time a readable report for a manager, with the mitigation needed to apply to their reality. Among the main features of the CPCECHO service, the following stand out:

Automated applicability of the MITRE ATT&CK© framework;

Use of more than two hundred attack techniques, with thousands of distinct practices;

Assessment of potential security flaws in the email gateway, web gateway and web application firewall;

Simulation of phishing attacks on endpoints, with the ability to move from one attack point to another internally within the organisation.

With this offering, CPCECHO wants to help organisations move from a reality of simulated attacks carried out sporadically to continuous simulated attacks, confronting the company's security reality on a day-to-day basis.

Ricardo Sousa, Head of Technology at CPCECHO, states that «the new service now made available by CPCECHO reflects our concern with cybersecurity. With this proposal, companies can properly assess their level of exposure to threats and identify potential points of vulnerability».