usd AG

usd AG is a German cybersecurity consulting and services company offering penetration testing, security analyses, and red teaming assessments through its usd HeroLab division. Their services include web application and mobile app pentests, red team assessments simulating real-world attacker scenarios, and PCI compliance assessments as a certified PCI Assessor Company recognized by the PCI Security Standards Council. The company develops internal tools for security testing, such as the Cyber Security Transformation Chef (CSTC), a Burp Suite extension for automating web application security testing, which they present at industry events like Black Hat and DEF CON. usd AG also provides consulting on regulatory compliance topics such as NIS-2 incident reporting obligations and supports organizations in building information security management systems (ISMS). Their client base appears to include organizations in the financial sector, given their focus on payment security and PCI compliance. The company operates a training arm, CST Academy, and maintains an active security research and community presence, sharing open-source tools and security advisories with the broader cybersecurity community.