Send e-mail to ACROS SecurityACROS Security's public PGP key  
     

Your Security
Problems


Executives,
Supervisors, Auditors

You are the legal owner of your corporate data and information protection. More...

IT managers,
Security Officers

You're responsible for the security of your company's information system. More...

Product Managers,
Software Developers

You're developing a software product that needs to protect your customers' information. More...

Our Security Solutions


Application Security Analysis

We find vulnerabilities in banking, commerce, business, mobile and other software that you develop or use, and help you fix them in a cost-effective way before someone else finds them. More...

Penetration
Testing

We become your friendly attacker and try to penetrate into the most critical parts of your information system in a controlled and managed fashion. More...

Security
Consulting

We help you reach informed, secure business decisions on operational, tactical or strategic level. More...

About ACROS Security

ACROS Security is specialized in providing advanced security analyses of products and systems. Our innovative security research pushes the boundaries of global knowledge, keeps our customers ahead of competitors and users safe from attackers.

We work for financial institutions, software vendors, online service providers, cloud providers and others who consider the security of their information and services critical.

Follow Acros Security on Twitter
...for updates on our security research.

ACROS in the Media

(IN)SECURE Magazine, "7 questions you always wanted to ask a professional vulnerability researcher"
(Dec 2011)

Bluewin, "Sicherheitsexperte findet neue Lücken beim Online-Banking" (in German)
(Nov 2011)

Handelsblatt, "Angriffe auf Server der Banken lohnen sich" (in German)
(Nov 2011)

SC Magazine, "Bug may enable remote code execution in Chrome"
(Oct 2011)

>> More media references...

Latest Public Advisories

Google Chrome HTTPS Address Bar Spoofing
(Jan 2012)

>> More advisories...

News

ACROS blog: Is Your Online Bank Vulnerable To Currency Rounding Attacks?
(Jan 2012)

ACROS awarded a bug bounty from Google for a high-impact "URL bar spoofing" bug in Chrome.
(Dec 2011)

ACROS presented "Advanced (Persistent) Binary Planting" at Source Barcelona 2011. A new binary planting attack vector was demonstrated for the first time.
(Nov 2011)

ACROS presented "How To Rob An Online Bank And Get Away With It" at DeepSec 2011. A lot of controversy about breaking the bank without breaking the law.
(Nov 2011)

ACROS will present "Advanced (Persistent) Binary Planting" at RSA Conference USA 2012 in San Francisco.
(Nov 2011)

ACROS delivered a talk on "Remote Binary Planting" at RSA Conference Europe 2011 in London. Slides are available here.
(Oct 2011)

Stanka Salamun of ACROS presented "Tracking Mary Smith" at the national ISACA conference, revealing the results of our extensive privacy research in Slovenia
(Sep 2011)

>> News archive...