Introduction to Artifact Security - a new security testing lab
- Stefan Dumitrascu
- Mar 14
- 2 min read
After re-writing this introduction paragraph numerous time I said screw it, the important things are the mission statement, what we do and how we differ from everything else out there.
If there is one thing to take away from this post is that we strive to provide unmatched transparency and innovation across all functions of Artifact Security. Similarly, we will always push our partners to work with and push cyber security forward. Our clients are not rivals but partners as we should all try to work together to make security better for the end customer.
What security testing services do we provide?
We launch our security testing with 3 evaluations and 1 certification program available. Our crown jewel is our AI SOC evaluation. We’ve spent a lot of research to establish key metrics and evaluation scenarios that will help security solutions showcase their capabilities and help organizations differentiate between marketing claims and real impactful capabilities to their SOC.
On the way to building our AI SOC evaluation we’ve had to design two other testing services, Cloud & Identity Testing and Advanced Persistent Testing (APT). The Cloud & Identity evaluation allows us to focus on one of the most regularly abused attack methods, identity misuse. This evaluation is suitable for MDRs, MSSPs, ITDR or Email solutions. Our APT service is focused on delivering highly innovative tradecraft in addition to assessing capabilities such as detection engineering provided to the customer.
As AMTSO members, we are happy to provide our Malware Scanning certification service for new or old players in the market that would like to be part of the VirusTotal community.
We will have a series of posts going through each of these in more detail, in the meantime all the methodologies are available here.
For those of you who may have worked with me in the last 14 years, you know I always welcome feedback on methodology or any part of my work. One last thing I will close with is that I want Artifact Security to have an active part in the community, always strive to keep up to date with the latest trends and improve upon our services.
Any feedback on our current methodologies or ideas for new areas that can benefit from our approach to testing is welcomed.
