The following diagram outlines the client-centric approach ZX Security utilises to deliver engagements.
Cloud Security
Giving you a clear picture of your security posture in the cloud
- Cloud Security Maturity Assessments
- Cloud Security Professional Services
- Cloud Security Reviews
- Continuous Cloud Security Posture Management
Learn more about our Cloud Security services
Cyber Strategy and Risk
We can help you identify and assess the security posture of your systems and people.
- Risk / Privacy assessments
- Security Health Check
- Incident Response / Disaster Recovery
- Regulatory Support
- Security Roadmap / Programme of Work
- Security Training and Awareness
- Security Operations
- Software Development Life Cycle (SDLC)
- Security Policy Documentation
- Reporting
- Solution Design Review / Control Framework Alignment
- Board Advisor Service
- Due Diligence for Mergers & Acquisitions
- PSR Assessment, Roadmap and Uplift
- ISO/IEC 27001:2022 Implementation
Learn more about our Cyber Strategy and Risk services
Penetration Testing
Identifying security vulnerabilities in your applications and systems
- External Penetration Test
- Internal Penetration Test
- Red Team Engagement
- Website Penetration Test
- API Penetration Test
- Mobile Application Security Review
- Source Code Review
- Wi-Fi Penetration Test
- Host Hardening Review
- Phishing Exercise
- Specialist Testing
Learn more about our Penetration Testing services
Training
We offer a wide-range of security-related courses
Learn more about our training services
ZX Security has been built understanding how Environmental, Social and Corporate Governance (ESG) can benefit a business far beyond the metric of financial success. Learn about some of our initiatives below.
ZX Security gives away (approx.) 250 hours of cyber security consulting time to not-for-profit organisations.
Learn more about Hacking for Heroes
The Green Team look at making ZX a more environmentally responsible and sustainable business.
Learn more about our Green Team
Security Feature Bypass In Zitadel — Race Condition
13th November 2023
Zitadel was found to be vulnerable to a race condition, leading to the application processing numerous successful brute-force login attempts before triggering an account lockout.
View advisory: Security Feature Bypass In Zitadel
Zitadel one click silent account takeover — Multiple issues
7th November 2023
The avatar upload functionality was found to be vulnerable to stored cross-site scripting via SVG's.
View advisory: Zitadel one click silent account takeover
Security Feature Bypass In ASP.NET and Visual Studio — Race Condition
12th July 2023
The SignInManager in ASP.NET was found to be vulnerable to a Race Condition leading to thousands of successful brute-force login attempts before triggering an account lockout.
View advisory: Security Feature Bypass In ASP.NET and Visual Studio
Green Team Tree Planting at Ōwhiro Bay
26th June 2023
ZX Green Team gets muddy planting native trees.
View insight: Green Team Tree Planting at Ōwhiro Bay
ZX Hosts 10 Brandon Street Green Team meeting
20th June 2023
Last month ZX hosted the 10 Brandon Street Green Team meeting bringing together Green Teams from other companies in our building to share sustainability ideas.
View insight: ZX Hosts 10 Brandon Street Green Team meeting
Setting off on our carbon neutral journey
27th February 2023
We are thrilled to announce that we have officially set off on our carbon neutral journey with Toitū Envirocare!
View insight: Setting off on our carbon neutral journey
BSides San Francisco
4 May to 5 May 2024
CityView at SF Metreon
BSidesSF is an Information / Security conference that's different. Presenters at BSides SF conferences are engaging the participants and getting the discussions started on the "Next Big Thing", not preaching at you from the podium about last month's news.
View event: BSides San Francisco
TuskCon
14 October to 15 October 2023
Cotton Tree Caravan Park, Maroochydore
Tuskcon is a two day hacker camp with an emphasis on hands on learning and activities, not death by powerpoint.
BSides Canberra
28 September to 30 September 2023
Canberra, Australia