2026 © Trax55 srl | Piazza della Repubblica 19 - 20124 Milano (MI)
P.iva 13236240969 | Rea MI-2710972
Privacy policy
To protect a critical infrastructure, it is not enough to be an IT expert, you need to know the environments, characteristics and critical issues of each specific sector.
The security of IT applications is crucial, as they have become ubiquitous in our daily lives, from mobile devices to web applications, from connected devices to cars. Protecting these applications is essential to maintaining their functionality and protecting user data and privacy.
Our approach to Application Security is based on the "Secure By Design" principle, which involves implementing security from the earliest stages of software development. This method allows us to provide customers with a solid foundation and identify potential security issues early, thus reducing vulnerability fixing costs.
The service includes Penetration Testing, using methodologies such as OWASP combined with proprietary tools to test web applications, APIs, Android and iOS mobile applications, and extending to cloud services and serverless technologies. The reports produced following the Penetration Testing activity illustrate the identified vulnerabilities, classified using a methodology derived from NIST 800-30 or CVSS 3.1 upon request, providing detailed mitigation recommendations that can be easily applied by developers.
Trax55 offers a Secure Code Review service, an in-depth analysis of source code to identify potential vulnerabilities, whether introduced deliberately or inadvertently. The analysis uses tools specifically developed by Abissi to ensure maximum accuracy.
The offering is rounded out with training activities tailored to the client's needs, covering topics such as secure development and integrating security into the software development lifecycle.
The Cyber Threat Intelligence service developed by Abissi operates in the so-called "gray zone," using a proprietary framework for searching information on the Deep/Dark Web and from specific sources. By cataloging and correlating this information, it is possible to understand and proactively identify potential threats, enabling potential attacks to be nipped in the bud, preparing tailored defenses to effectively nullify their effects, and identifying fraud attempts with a depth and timeliness that no other technology can currently offer.
The constant growth of internet connections and the enormous volume of digital data (big data) produced by internet users make Open Source Intelligence (OSINT) an essential requirement for public administrations and private companies requiring effective support for vulnerability management, risk analysis, and rapid incident response.
Security in the Internet of Things (IoT) is vital in the era of digital interconnection. IoT is a network of intelligent devices that communicate with each other and with the outside world via the internet. It spans diverse categories, such as industrial sensors, smart home devices, alarm systems, video surveillance systems, smart mobility and smart cities, and medical monitoring devices, each with specific security requirements.
Potential IoT threats include unauthorized device access, compromise of collected data, distributed denial of service (DDoS) attacks, malware injection, violation of user privacy, and device manipulation that could compromise end-user safety. In this scenario, Abissi represents the benchmark for IoT security.
The company applies security frameworks, such as the OWASP ISVS (Internet of Things Security Verification Standard) and ETSI EN 303 645, to conduct customized tests based on the criticality of each device. Penetration testing services include a comprehensive assessment of devices at the hardware, wireless, and wired communications levels, and, in the most sensitive cases, an in-depth firmware analysis.
We also support your product compliance with European and international regulations, such as the RED (Radio Equipment Directive), the UK PSTI Regulation, and the Cyber Resiliency Act, ensuring that devices meet the highest security standards.
In addition to testing, we also provide threat modeling to identify and assess potential threats and vulnerabilities in IoT devices. Our customized approach, based on recognized security standards, provides a solid foundation for protecting the integrity of IoT devices and data.
The growing proliferation of connected vehicles has significantly increased vulnerabilities and security issues within the automotive industry. Abissi offers a comprehensive solution that brings together all the tools needed to address these risks in the connected car ecosystem. Abissi's methodology is based on the ISO/SAE 21434 standard (Road Vehicle Cyber Security Engineering) and offers clear compliance paths with European regulations UNECE R155 and R156, which are mandatory for the type approval of new vehicles.
In an increasingly interconnected automotive industry, ensuring the protection of every critical element within a vehicle against security threats is paramount. This aspect not only concerns cybersecurity but is also crucial for the protection of everyone who physically uses these vehicles.
Abissi's approach focuses on evaluating and protecting all aspects of the automotive ecosystem. This involves performing a comprehensive security assessment, including both hardware and software, which is essential for identifying potential threats and assessing the associated risks.
To ensure the security of an IT infrastructure, a key aspect is Vulnerability Assessment & Penetration Testing (VA-PT). This allows you to put a specific technological system to the test, exploiting it to identify potential flaws and vulnerabilities that could prove critical if exposed and not adequately controlled. This process is crucial, and Abissi offers customized solutions to assess potential weaknesses in a company's technological infrastructure and evaluate the level of protection.
Our team provides a detailed assessment of the potential business impact and appropriate recommendations for mitigation plans, following major standards and best practices. These include:
• ISECOM OSSTMM 3.0, used for certain security audits.
• NIST CSRC, which offers guidance on IT security best practices.
Thanks to our in-depth analysis, based on these fundamental methodologies, we enable you to effectively identify and address infrastructure vulnerabilities, thus helping protect data and ensure your organization's business continuity.
Artificial intelligence is transforming cybersecurity and is becoming a constantly evolving field aimed at protecting systems and applications based on this technology from potential threats and vulnerabilities. With the increasingly widespread integration of AI technologies into various aspects of daily life, protecting these systems is of fundamental importance.
Our AI Security service, offered by Abissi, stands out for its comprehensive approach, both offensively and defensively. In the offensive phase, the focus is on identifying vulnerabilities in systems based on Large Language Models (LLM), such as ChatGPT, Bard, and their derivatives. This analysis, including the adoption of the OWASP Top 10 LLM and MITRE ATLAS methodology, aims to identify potential weaknesses that could allow an attacker to alter the normal behavior of the system and access valuable data, with particular attention to privacy implications.
From a defensive standpoint, Abissi's AI Security service supports clients from project conception to deployment, ensuring the production launch of an LLM-based system compliant with industry best practices and current regulations, such as AI ACT. Continuous monitoring is provided to promptly detect any attacks targeting the model, thus ensuring proactive and effective defense.
2026 © Trax55 srl | Piazza della Repubblica 19 - 20124 Milano (MI)
P.iva 13236240969 | Rea MI-2710972
Privacy policy