Immunity Systems

Attack simulation and security audits

Security audits, penetration tests, red teaming, post-breach analysis and attack simulations make up most of the work at Immunity Systems. The company tests networks, applications and devices for clients, and helps organisations build security into IT projects from the start. Its team, which the company describes as having more than ten years of offensive and defensive IT security experience, also researches new attack vectors and tests new defensive methods.

Products built in-house

Threat Magnet is a deception system. It is designed for a permanent threat of intrusion by sophisticated techniques, and it works by persuading an attacker that they have reached the critical data or systems they wanted, when they have not. Threat Provider is a tool for running simulated phishing campaigns and measuring how staff respond to them. Each campaign is made up of one or more scenarios, and each scenario tracks several goals. The company says its phishing tool was built by people with hacking experience. Its product list also includes APT Defend and Phish Sentinel, which it presents as answers to advanced intrusion techniques and phishing attacks.

Training and co-funded research

Cyber Security Aware Employee is an online course with certification that aims to raise staff awareness of current threats. Where a large number of people need training, the company also offers on-site sessions for senior managers. The company builds its own offensive and defensive tools, and it tests new approaches as part of its research. The project is co-funded by the European Union under the Digital Europe programme.