Char49 offers a wide range of information security services with total confidentiality and reliability.

Our experienced professionals have helped organizations to secure their assets, improving trustworthy

We are specialists in Web Applications security testing (e.g. websites, portals, applications, etc.) but with a well-established and solid partners network we can easily cover any scope. We aim to protect our clients assets, mitigating the impact of compromised systems and information leaking. We partner with our clients, sharing the responsibility to protect their assets.

Training

Recent Talks

Research featured on:

Wired
The Hacker News
Threatpost
Techcrunch
CNN
Fortune
Forbes
Security Week
The Sun
The Telegraph
The Daily Mirror

Auditing

Independent security auditing is the best way to identify weaknesses. We offer penetration testing services (one-time-only or persistent) with required support to mitigate any security risks.

Consulting

Every organisation needs a strong information security posture. We provide the necessary tools and services in establishing a channel to reduce the risk of data losses.

Training

The human factor is still considered to be the primary risk in security. Our trainings empower organizations with the best information to defend itself against ever-evolving threats.

Clients

Financial Services

Banking, insurance, credit card companies, credit unions, savings, investment companies, brokerage firms, etc.

Healthcare

Biotechnology companies, pharmaceutical companies, clinics, hospitals, healthcare products manufacturers/sellers, etc.

Information Technology

Hardware, software, data centers, platforms, infrastructure, systems integrator, etc.

Media & Telecommunications

Social Media, video games, publishing, telecom equipment, telecom services, wireless communication, etc.

Char49 does real hands-on security

and not simply talk around security.

Learn about us

Recent articles

18 May

Hunting the OWASP API Security Top 10

Early 2019 we, at Char49, were challenged to research the most common API security issues. At that time API security was not exactly on the news, but APIs were becoming a fast-paced critical piece of modern applications architecture. We followed this technological change since its early days either due to our penetration testing services or responsible disclosure programs. That had given us a great understanding and experience on the API security scene, but we’ve dug deeper into API-related publicly available security incidents data. Our contribution was released later that year as part of the OWASP API Security Top 10 2019.