A Redspin security audit focuses on real security and compliance problems. If our security assessment uncovers a vulnerability, we drill down for more information. We make sure we understand your business and your operational environment, so that when we find irregularities we know whether or not they matter to you.

While it may be vaguely interesting to report that "Port 139 on Bob's Laptop is open" after running automated pentesting tools on the internal network, how does that help anyone? Neither one of us has the time for a trivial security audit.

Brian has done a security assessment for the Department of Defense, the Supreme Court, and the CDC. Mark handled the IT security audit for a casino, where they really care about their money. Paul was on the winning 2005 Defcon Capture The Flag team. The Redspin Team has done security assessments at over 100 financial institutions.

These are the guys you want doing security assessments of your network.

We know that some people just want a security audit because a regulator is making them get one. Nothing wrong with that. If you go to a big 5 consulting firm, you can expect to add a zero to our price - and that's about how much extra you'll get from their security assessment. In our own niche, we'll tell you right now that our security assessment cost is comfortably smack dab in the middle. But our Objectivity? Our Analysis? Our Quality? Incomparable. And that's going to save you real money in time, headaches, and PR.