Windows-Client Test (optional with real malware)

Name: Windows-Client Test (optional with real malware)
Price range: $

Most of all attacks escalate via clients. Let us test your client before hackers do.

Single Test

3800 €

Sample Images and Screenshots

Steps

Client security (e.g., workstations, laptops) is critical to your business continuity. We analyze your client security from an independent perspective and provide actionable recommendations

💡 Testing of PHYSICAL or VIRTUAL Clients

Customers typically provide us with two physical clients via mail (DHL, Hermes) or two virtual machines (VMs) via remote access, along with test users to verify specific security policies and behaviors.

Step 1

Kick-Off (60 min)

We introduce you to our methodology and align on project execution. This includes defining goals and scope, assessing environmental conditions, coordinating access, and finalizing the timeline.

Result: Agreed-upon plan for steps 2, 3, and 4.

Step 2

Testing (optional with real & live malware / ransomware at the end)

We perform more than 120 test cases on your client.

Physical Clients: We can execute real ransomware in an isolated (offline) test environment to prove how deeply malware escalates or is prevented. This is completely safe; we do not connect to your company network afterward and we fully wipe/flash the disks before returning the hardware.

Virtual Clients: Real malware testing is not available for VMs due to imminent danger.

Regular Syncs: To keep you informed, we hold brief status meetings (e.g., twice a week) to discuss real-time findings and project progress.

Step 3

Reporting & Closing meeting

Our experts consolidate the data into a comprehensive report. This includes a high-level Management Summary for stakeholders and a detailed list of prioritized technical recommendations. In our final session, we present the findings, walk you through the necessary steps to close security gaps, and provide the strategic insights needed to bulletproof your businesses.

Step 4

Repeat (recommended)

Client security evolves rapidly. We recommend repeating this module annually.

Request Your Custom Assessment

Sheet

Category

Security Test
Your internal effort (~)

5 h
Duration

3 weeks
Compliance & Accountability relevant?

✅
Applicable to/at

All Windows Clients (e.g. Laptop/PC/Tablets/Workstations)
EUSEC®-Module

EUSEC®-Windows-Client-26A

Details

Key Outcomes (What you achieve)

Independent Validation: Your client security risk is objectively assessed by top-tier experts.
Risk Reduction: Critical vulnerabilities are identified and eliminated, significantly reducing your overall security risks.
Improvement Started: Your company is empowered to implement effective security measures to detect, withstand, and recover from attacks.

Deliverables (What you receive)

Traceable Evidence: Comprehensive documentation of your Technical and Organizational Measures (TOMs) for client security, validated by a Principal Cybersecurity Expert.
Detailed Report: A PDF report (approx. 15–40 pages).
Executive Summary: A high-level summary (2 pages) for leadership.
Attachments

In-Scope

Meetings: 1-hour Kick-off, regular syncs (1–2 times per week), and a 1.5-hour Closing Meeting.
Regular syncs (e.g. 1 or 2 times per week).
Closing Meeting: 1 to 1,5-hour
Expert Assessment: Testing of your Windows clients by a Principal Security Expert (remote).
- 120 Test Cases, including, e.g.:
  - Windows-Policy, MS Defender, Bitlocker, PowerShell, SmartScreen, Secure Login, Macro Configs, Login and Passwort, WLAN Connection and Internet Usage, Kernel Isolation, Windows Telemetry, Samba, Encryption, Protocols,
    Firewall Configurations
Executive Summary: A high-level summary (2 pages) for leadership.
Risk & Measure Catalog: A catalog providing concrete, actionable recommendations.

Out-of-Scope

Real Malware Test (Add-on): Execution of 6 real ransomware and malware samples to prove infection resilience (€1,100 surcharge).
Ticket Creation: Creating tickets in your management system (e.g., Jira) is optional and not included by default.
Onsite/Observed Testing: Testing via screen-sharing or onsite visits is available as an optional cost.
Group/Corporate Entities: Multiple subsidiaries or legal entities require separate packages.
Implementation: The actual execution of corrective actions/remediation.
General Exclusion: Any items not explicitly mentioned as "In-Scope" are considered out-of-scope.