Ruff Security
Who we are
Our goal is to provide cyber security services to small and medium businesses that desire affordable security assessments with customized, prioritized remediation guidance and recommendations.
Our extensive experience helps us understand what truly matters to small businesses and how they can effectively secure their environment.
- Penetration, Web Application, and API testing for small businesses
- Security assessments with customized recommendations
- Certified security consultants
Cyber security is a top priority for every organization, no matter the size. Ruff Security can bring security assessments and consulting by qualified engineers to your organization today.
Contact us today to discuss your cyber security needs.
Contact UsCertified Security Consultants
Ruff Security's engineers hold multiple offensive and defensive certifications, including the Offensive Security Certified Professional (OSCP), Practical Network Penetration Tester (PNPT), and GIAC Certified Incident Handler (GCIH).
- Offensive Security Certified Professional (OSCP)
- GIAC Certified Incident Handler (GCIH)
- TCM Security Practical Network Penetration Tester (PNPT)
- TCM Security Practical Junior Penetration Tester (PJPT)
- Certified CyberDefender (CCD)
- CompTIA Security+, CySA+, PenTest+

Consulting Services
Do you need guidance and recommendations from cyber security experts? We can provide general cyber security consulting to help you architect secure networks, evaluate new products, and implement fixes and projects to improve the security of your organization.
- 10+ years of System Administration and Cyber Security expertise
- Deployment and configuration of endpoint protection and Tenable/Nessus products
- Experienced and Splunk Certified Cloud Admin for SIEM deployment and integration

Vulnerability Assessments and Penetration Testing
What's the difference between a Vulnerability Scan, Vulnerability Assessment, and Penetration Test?
A Vulnerability Scan is the very first step in adopting a vulnerability management program. Performing regular vulnerability scans keeps the organization informed of missing patches, end of life software, and other vulnerabilities in their environment. However, a vulnerability scan is an automated scan and report, and should not be confused with a penetration test which has a human ethical hacker attempting exploits and finding vulnerabilities that the automated scans won't detect.
Our Vulnerability Assessments include a vulnerability scan, but also have one of our security consultants manually scanning and enumerating the systems looking for vulnerabilities and prioritizing the vulnerabilities that are found. We provide a detailed report with recommendations and prioritized vulnerabilities to remediate first to maximize the time your staff spends implementing fixes for the biggest impact.
Internal and External Penetration Tests involve a simulated attacker attempting to break into your systems. This is the next level of a vulnerability assessment and not only includes identified vulnerabilities and recommendations, but also includes detailed attack paths that were taken to compromise systems and recommendations to close those vulnernabilities.
Ruff Security provides all of these and more services. Contact us today for a quote for your security assessment and consulting needs!

Supporting Small Businesses
Just because a small business doesn't have a well staffed security department, or a large IT security budget doesn't mean attackers will leave you alone.
Here at Ruff Security we want to provide our services to businesses of all sizes, and strive to provide affordable security assessments and consulting services. Our detailed reports will include customized and prioritized recommendations so you can make the most impact at securing your systems with limited budgets and IT staff.
Limited IT staff? No problem, we can also provide general consulting services to help implement any changes or architecture designs that you may require.

Need a Quote?
Contact us today to request a quote for your security assessment and consulting needs.
Services
What we can help with
Penetration Testing
Simulated attacker internal or external penetration testing. Receive a detailed report with identified vulnerabilities and attack path, with recommendations to mitigate identified vulnerabilities.
Web Application Testing
OWASP Top 10 testing of web applications. Looking for logic flaws, input sanitization, authorization issues and more.
API Testing
OWASP guided testing of your API endpoints, looking for logic flaws and vulnerabilities in input sanitization, and more.
Code Reviews
Our security consultants can review your code for known vulnerabiltiies, input sanitization issues, and logic flaws.
Password Audits
Audit your password policies and offline brute force attempts to crack user account passwords.
Wireless Assessments
Test your wireless infrastructure for known and easily exploited vulnerabilities.
Phishing Assessments
Send simulated phishing emails to your staff to test their awareness and susceptibility to phishing attacks.
Consulting Services
General consulting services to help you architect secure networks, and implement projects to improve the security of your organization.
Contact
Contact Us
Feel free to contact us about any of our services, or to discuss your cyber security needs.
Location:
Wichita, KS
Email:
info@ruffsecurity.com
Call:
316-768-0220