softScheck

softScheck is a cybersecurity consulting and testing firm that has operated for approximately 20 years, focusing on securing IT and OT environments. The company applies a "Security Testing Process" comprising five methods that extend beyond conventional penetration testing to identify vulnerabilities in software, firmware, and microcode. Core services include penetration testing across web and mobile applications, internal and external infrastructure, and red teaming exercises. The company also offers AI security testing, which involves adversarial testing of LLM-powered applications and machine learning systems, covering areas such as prompt injection, model abuse, data leakage, and supply-chain risk. Additional offerings include threat modeling to inform trustworthy system design from early development stages, fuzzing as a dynamic testing method for automated vulnerability identification, security consulting guided by their multi-method testing process, and workshops covering various IT security topics delivered online and onsite. softScheck also provides incident response support, including assistance with IT restart processes and forensic investigations following security emergencies. The company applies relevant international IT and OT security standards in its work. Its client base and service delivery are structured around a consulting approach intended to align security practices with business and return-on-investment considerations.