binsec GmbH

Company Profile

binsec GmbH is a specialized and established penetration testing provider based in Frankfurt am Main, Germany. As an owner-managed security boutique, the company has focused exclusively on high-quality, manual security assessments and offensive security for mid-sized and enterprise organizations since 2013.

As a company, binsec GmbH places particular emphasis on quality, transparency, and sustainability:

• 100% In-House Expertise: No subcontracting or use of external freelancers. All assessments are conducted by permanent senior security experts.
• Direct Contact with Experts: Clients communicate directly with the executing analysts, with no sales reps in between.
• Focus on Business Risk: Identification of both technical and business-critical risks (risk-weighted evaluation based on CVSS).
• Re-Testing Included: Verification of remediated vulnerabilities is included in the scope of remote assessments.
• Proprietary Test Infrastructure: All tests are conducted using a fully controlled, proprietary pentesting infrastructure without reliance on third-party cloud services.

The executive management team consists of Patrick Sauer (CEO), Dominik Sauer (Head of Penetration Testing), and Florian Zavatzki (CTO). At security.sauer.ninja, Patrick Sauer and his brother Dominik Sauer run a personal blog covering IT security, penetration testing, and business leadership. Unlike traditional corporate publications, the blog features an authentic and unvarnished style. Patrick Sauer uses the platform to share personal insights on industry trends and analyze complex security topics free from marketing jargon.

Services & Assessment Scope

The portfolio encompasses a wide range of tailored penetration testing services, extending from traditional application security assessments to holistic adversary simulations:

• Web Applications & SaaS: Authenticated and unauthenticated testing, multi-level role and authorization checks (tenant isolation), injections, XSS, and business logic flaws.
• APIs & Interfaces: Security testing for REST, SOAP, and XML APIs, as well as endpoints in modern web and cloud architectures.
• Internal Penetration Testing: Active Directory, internal servers, network segmentation, RDP servers, as well as Wi-Fi and IoT environments.
• External Penetration Testing: Analysis of publicly accessible IP ranges, web servers, VPN gateways, email infrastructure, and cloud services from an attacker's perspective.
• Mobile Apps: Security assessments for iOS and Android applications, including dynamic/static analysis, traffic interception, and reverse engineering.
• Medical Devices & E-Health: Penetration testing to ensure regulatory compliance with the EU Medical Device Regulation (MDR), MDCG guidelines, and ISO/IEC 81001-5-1.
• Container, Cloud & DevOps: Security assessments for Docker containers, Kubernetes clusters, and CI/CD pipelines.
• Red Team Assessments: Comprehensive, multi-stage adversary simulations to evaluate an organization’s detection and response capabilities.
• Social Engineering & Phishing: Technical and organizational phishing campaigns designed to evaluate employee security awareness.
• Physical Security Assessment: On-site testing of physical access controls, building security, and data center perimeters.

Methodology & Standards

All penetration tests follow recognized industry standards:

• OWASP Web Security Testing Guide (WSTG)
• OWASP Top 10 / API Security Top 10 / Mobile Top 10
• OWASP Mobile Application Security Verification Standard (MASVS) & MASTG
• BSI Guidelines & Recommendations (Federal Office for Information Security)
• OSSTMM (Open Source Security Testing Methodology Manual)
• PTDoc®: Use of a proprietary, structured, and fully documented testing methodology to deliver repeatable results and reports featuring both executive summaries and technical details.

Certifications

The security team at binsec GmbH holds various industry-recognized certifications, including:

• OSCP (Offensive Security Certified Professional)
• OSCE (Offensive Security Certified Expert)
• CRTO (Certified Red Team Operator)
• BACPP (Binsec Academy Certified Pentest Professional)

Engagement & Resources

binsec GmbH actively engages in knowledge sharing and provides open resources to the cybersecurity community:

• binsec.tools: A platform featuring free online security analysis tools (e.g., SSLCheck, SubDomainFinder, HashLookup) for mapping external attack surfaces.
• binsec.wiki: An open knowledge base and technical platform designed to provide guidance on the German penetration testing market, guidelines, and technical standards.
• binsec academy: A hands-on training platform for software developers and security professionals (e.g., Secure Coding Labs and practical certifications).
• Academic Teaching: Active lecturer roles at the Darmstadt University of Applied Sciences (h_da) and the Technische Hochschule Mittelhessen (THM) covering IT security management and penetration testing.

Contact

• Address: Clemensstraße 6-8, 60487 Frankfurt am Main, Germany
• Phone: +49 69 2475607-0
• Email: info@binsec.com
• Website: https://binsec.com