A subsidiary of the Rosatom state corporation has implemented the mobile version of PT Dephaze, an automated penetration testing system developed by Positive Technologies. The integration was managed by the cybersecurity firm iTProtect to ensure compliance with FSTEC Order No. 117.
The PT Dephaze system performs continuous security assessments by simulating attacker actions within the internal IT infrastructure. It identifies vulnerabilities, excessive user access rights, network segmentation issues, and weak password policies by utilizing over 100 compromise techniques.
The mobile version of the tool allows for local testing on laptops, which is particularly useful for assessing security in isolated network segments or restricted facilities. This approach enables frequent security checks without disrupting critical business processes.
During the initial pilot phase, the client evaluated the system's ability to configure testing parameters, define exclusion zones, and control the intensity of simulated attacks. The solution provides actionable recommendations to mitigate risks and prevent unauthorized data access.
