Audits on technologies and solutions
Auditing a product
Engaging with a new client with a built-in secure solution can look like a leap of faith. Making sure that their solution fulfills the required security properties is mandatory. It has two objectives: be sure that the security is considered at the correct scale and be sure that the solution has been built seriously.
With that in mind, Geminos conducts inspections and audits to identify defects and areas of caution.
Questions in mind include but are not limited to: place of usage and storage of secret material, time of secret material in memory, usage of TEE, possibilities of standard attacks (man in the middle, replay, shadow, logistic chain, quality of entropy generation, possibilities of flaws in protocols used, ...
Auditing a technology
More generally, Geminos deep dives in new technologies to understand how secure they can be. The output is a level of confidence in the security of the technology based on what the technology is using, how proven the security is, and how easy it is to use without breaking security assumptions.