Web application penetration testing
We have more than 10 years of experience performing web application penetration tests,Way before the AI agents era we did it for big organisations and insitutes, on every possible Linux flavor or Unix O.S. We also offer code review services, W.A.F installations, consulting and much more. Contact us now.
Android & Linux Embedded penetration testing & security
we can help you manage the security of your custom devices, including smart TV’s, mobile devices, home/office alarm systems and Smart home systems. We have extensive “hands on experience” with Smart TV’s in particular and have worked for one of the biggest corporations in the world. We are sure we will be able to help you.
0-day EXPLOIT RESEARCH
“0 Day exploit research” – Our experts will search your hardware or software product for “0 day” vulnerabilities. Finding “0 days” might be a long and complex process, but we have already helped one of the biggest corporations in the world to prevent 0 days in their product, so we would like to help your corporation to get prepared for cyber attacks and zero days.
Android Compromise Assessment
Welcome To Tyr Data Security, We do cyber since 2009.
Tyr Data Security offers a wide variety of services and solutions in the data security & cyber intelligence field. Our focus is penetration testing (web applications, mobile apps, network infrastructures, network appliances and security architectures). We have conducted penetration testing for major clients from both the GRC and the private sector. We have 15 years of experience dealing with security issues in the Unix/Linux environment. We were part of the “Cyber security” world before it was even named “Cyber Security”!
Tyr Data Security also deploy security solutions based on the client’s needs and findings. We deploy software or hardware solutions (such as: IPS, IDS, W.A.F (web application firewall), “SQL firewalling”, network firewalls, SElinux, DLP and several monitoring sensors). We specialize in open source solutions but we are also experienced with proprietary products.
Tyr also help firms with implementing a secure software development life cycle (S-SDLC). It’s better to do code review and maintain a full S-SDLC process before releasinglaunching your product! Catch the flaws before the hackers do! You can use our team for outsourcing specific tasks or as an “in house” team at your location. We will be happy to serve and assist you.
Tyr focus on:
Web application penetration testing (black box and white box approaches), S.A.A.S services, network infrastructures, firewall policies, W.A.F (web application firewall) analysis & bypassing, network appliances, etc.) code review for web applications and high risk software (also standalone c++ apps), general security consulting, management of secure SDLC processes.
“0 Day exploits research” – Our experts will research your hardware or software product for “0 day” vulnerability. Finding “0 days” might be a long and complex process, but we have already helped one of the biggest corporations in the world with preventing 0 days in their product, so we would like to help your corporation get prepared for cyber attacks and zero days.
Android & Linux Embedded (also Smart TVs) penetration testing & security. We can help you manage the security of your custom devices, including smart TVs, mobile devices, home/office alarm systems and smart home systems (except pentest +). Alongside implementing security solutions, following you throughout the process, we can also create a bug bounty program for you and share it among the community.
Crypto currency backend penetration testing & general crypto security consulting – Related crypto SaaS services are at high risk. Alt coins, colored coins, it doesn’t matter, all of these can be risky for your online business. Don’t even take the risk! Let us examine your systems for vulnerabilities and other security issues before it’s too late.
Intelligence – Tyr focus on 3 types of cyber intelligence: Corporate Competitive Intelligence, Low Level Due Diligence and threat intelligence. Threat intelligence involves gathering information from several sources, such as the Darknet and IRC channels, but we can also penetrate closed hacking groups and get the information you need. We speak Arabic and have amazing connections in the Arabic hacking world. We also sell intelligence about specific persons, just contact us and we will set up an encrypted voice call. Additionally, we can uncover commercial reputation management terrorists who might harm your corporation (or try to extort you).
General security consulting & specific crafted tasks – Tyr experts have more than 15 years of experience in the data security field.
These days, when you can trust nobody, and even hardware manufacturers implement back doors (as a regulatory request), you must test your system for APT (advanced persisted threats) scenarios. We will help you to simulate, according to your budget, the scenarios for your needs and methods for reducing or preventing the damage from possible APT attacks.
Please contact us for more details and quotes!
Do you use a PGP-phone or other solution of encrypted voice communication? No problem. Simply email us keys and info.
Best Regards,
Eran Aharoni
Android Compromise Assessment.
Suspect your phone is compromised? I perform deep security examinations of Android devices — analyzing system logs (logcat) in real time and monitoring all device traffic through my proprietary EDR proxy software, built specifically for Android. I hunt for malware, stalkerware, and APT-grade spyware including Pegasus, FinFisher, and similar implants. Not a generic antivirus scan — a targeted, expert-level inspection of your actual device.
RUNTIME LOGCAT ANALYSIS
deep inspection of system and application logs to uncover suspicious processes, permission abuse, and hidden activity invisible on the surface.
TARGETED THREAT HUNTING
IOC matching and behavioral analysis for APT-grade spyware (Pegasus and equivalents), stalkerware, banking trojans, and RATs
CUSTOME EDR PROXY
all device traffic passes through my own monitoring software, revealing command-and-control communication, data exfiltration, and connections to known malicious infrastructure
PERSISTENCE AND PRIVILEGE CHECKS
accessibility service abuse, device admin exploitation, root indicators, suspicious app permissions
Intelligence.
Threat Intelligence & Corporate Competitive Intelligence.
Tyr Security serves our clients with intelligence that enable you to better understand the business environment you are working in, the potential business risks and, in some cases, business opportunities. We are able to perform such intelligence operations without breaking any laws, using cutting-edge “human behavior methodologies” in order to get the info our clients need. At the end of the process you will get a written report that meets your intelligence needs.
This may include: key players in the industry, future r&d strategies, products that are in the pipeline, H.R plans, points of conflict, corruption, fraud or bribery. We get the info from OSINT and through the use of other Humint tactics. We will gather and analyse the data for you, and the end product will be a written report.
We are currently capable of operating in the following locations: Europe, Israel & The Palestinian authority (Hebrew, Arabic) and the U.K.
We specialize in the Israeli-Palestinian & German markets.
Know the next step of your competitors
e will take the necessary steps to get the information you need from marketing departments. If they have made plans, we will get those plans for you. Our intelligence reports will help you to better understand your target and situation. Our lawyers follow
our teams while in action to verify we are adhering to local regulations and privacy laws.
What your compitotrs can know about you only from OSINT?
I’ts better check those issues before your enemies does, sometimes we leave way too many traces behind, those traces can lead sometimes to complete exploitation of your firm and assets, let us check your OSINT posture before the bad guys does.
Specializing in the German & Arabic languages
We have experience working within the Arabic communities of Europe & we have strong connections with other private label intelligence firms all over the arabic world.
if you are speaking Arabic please try the dictionary app our CEO has created:
https://play.google.com/store/apps/details?id=com.mabsut.milonia
Competitive intelligence
Competitive intelligence is an ethical and legal business practice. Industrial espionage, on the other hand, is illegal and unfortunately
used by small and big corporations alike. Your legal choice is to use competitive intelligence to get ahead of your competitors. Savvy managers
are getting competitive intelligence reports about their targets before closing important and sensitive deals.
Don’t fall behind!
CASE STUDY
Threat Intelligence
Monitor your firm’s appearances in the Darknet and other sources with our Active Threat Intelligence premium service.
Specific clients, mostly the active targets of specific cyber criminal groups, or past ransomware victims, need Tyr Data Security and its experts to “keep an eye” on the Darknet, Telegram channels and other hidden chat groups where cyber criminals and black hat hackers hangout and share information. We can, as we have for past clients, infiltrate a closed cyber criminal group and rescue the info you need. We provide services to both private and government sectors. We are using a Darknet scraper that we will customize for your needs. We will also gather human intelligence (Humint) from the specific individuals we target.
Sources we cover:
Telegram – We are monitoring many blackhat groups and chennels and we get daily information about leakings etc.
Darknet — open and closed markets, forums, and leak sites on Tor and I2P.
Deep & dark web chat — Telegram, Discord, and private channels where modern criminal coordination happens
Clearweb OSINT — paste sites, breach dumps, code repositories, and targeted custom scrapers built per client
IRC & legacy channels — still active in specific criminal niches; we monitor and infiltrate where needed
AI-assisted analysis — machine-assisted triage and entity linking across thousands of sources.
Uncovering commercial reputation management terrorists
n many cases, Tyr’s clients are suffering from attacks to their online reputation. Those attacks can start with fake, negative posts on social media pages, blogs and comments on mainstream sites and end up exhausting the firms ppc budget; affecting its digital reputation. Our task is to unmask the individuals behind the negative activity, who are, in most cases, operating anonymously. We will unmask their biases, motivations and, depending on the case, take the necessary actions to remove their false claims and cease the attack.
Due Diligence — Before You Sign Anything
A new market. A new partner. An acquisition. A “can’t-miss” deal in a country you don’t fully know.
Every one of these is an opportunity — and a bet on people you may have met twice. Tyr’s due diligence reports exist so that bet is informed before capital, reputation, or legal exposure is on the line.
What a Tyr report covers:
- Corporate and beneficial-ownership mapping (who really owns and controls the entity)
- Litigation, sanctions, and adverse-media screening
- Financial red flags and undisclosed affiliations
- Digital footprint and OSINT profile of key principals
- Geolocation verification — validating that claimed offices, assets, and operations physically exist, and that claimed events actually happened where and when stated
- AI-assisted document and media analysis — detecting fabricated credentials, manipulated images, and synthetic media in materials presented to you
- On-the-ground HUMINT where the situation demands it
Engagements are tiered and budget-scaled. It starts with a free consultation call, after which we craft a scoped quote. Every investigation is conducted through legal, ethical methods — designed to be actionable for your decision-making.
Mail Server Penetration Testing
Many orgnisations still using stand alone email servers instead of big cloud email services,Is your e-mail server (open source or proprietary) secured and updated? many exploites are outthere in the wild harming orgnisations – and they do not even know, emails are leaking to Asia and Africa for years – before the clients know or when the clients know it’s too late,maybe you use a webmail server that is exploitable? Often, companies choose to use open source solutions that have known vulnerabilities. Some, unbeknownst to the security system administrator, allow remote administration (it’s the default) or use a weak password policy. Your e-mail server is the heart of your business; dont expose yourself to corporate espionage. We will perform an in-depth scan of your mail server for security exploits, server and network misconfigurations, and other problems.