MADSEC

MADSEC

Speciality: Infrastructure and Application Penetration Testing

Tel Aviv, Israel 29 employees
Visit Website View on LinkedIn
[01] About

Cybersecurity consulting company specializing in penetration testing; offers infrastructure, application, cloud, mobile, and IoT pentests using industry-standard methodologies like OWASP and NIST 800-53; 20 employees, founded 2010, based in Tel Aviv, Israel.

MadSec Security LTD is a leading consulting company whose expertise are information and cyber security. We provide a variety of consulting services in the information security world while remaining unbiased by integration considerations. Our synergetic management team fuses together years of experience gained from filling key roles at the industries’ biggest players, in both business and academic sectors. This vast joint experience enables us to provide the customer with professional and up to date service, wide perspective, while using the newest technology and methodology available. Our edge is our team of experts who are both professional and service oriented. The teams operate in three main divisions: • Penetration Test Division – specializes in infrastructure PT (including SCADA), web applications and sites, applications, physical devices and IoT. • GRC Division – the governance, risk and compliance division specializes in risk assessment, ISO standards, regulations, policies and employee and management training in varied subjects. • Cyber Intelligence Division – specializes in the active gathering and analysis of cyber intelligence, cyber monitoring, cyber events investigation and incident response team that operates 24/7. Our projects are done using world’s most known best practices and methodologies such as: SANS, OWASP, NIST and others. With that being said we do leave room for our expert’s unique point of view and creativity. Thus, our customers enjoy both products that match industry’s standards and a custom project specification to match their needs. Among our many customers you will find both Enterprises and SMB’s from fields like: banking, insurance, education, finance, industry, homeland security, communication, municipal, high-tech and many others.
[02] Services
Penetration Testing
Technological Risk Assessment
Cyber Consulting
Cyber Simulation For Management
Red Team Simulation
CISO As A Service
[03] Certifications
ISO 9001

ISO 9001 and Cybersecurity/IT


Origin


ISO 9001 is a quality management system standard developed by the International Organization for Standardization (ISO), first published in 1987. However, it's important to note that ISO 9001 itself is not a cybersecurity or IT-specific certification—it's a general quality management standard applicable to any industry. For cybersecurity and IT specifically, ISO created ISO/IEC 27001 in 2005, which focuses on information security management systems. ISO 9001 was created to establish consistent quality management practices across organizations worldwide, while ISO/IEC 27001 was developed to address the growing need for standardized information security controls.


Industry Value


ISO 9001 is valued across industries for demonstrating an organization's commitment to quality, customer satisfaction, and continuous improvement, which can indirectly support IT operations. For actual cybersecurity and IT security certification, ISO/IEC 27001 is the recognized standard, valued because it provides a systematic approach to managing sensitive information, demonstrates due diligence to clients and stakeholders, and is often required for government contracts or business partnerships. ISO/IEC 27001 certification signals that an organization has implemented internationally recognized security controls and risk management processes, making it essential for building trust in an increasingly security-conscious business environment.
ISO 27001

ISO 27001: Information Security Management Certification


Origin


ISO 27001 was developed by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC), and was first published in 2005. It evolved from the British Standard BS 7799-2, which was created in the late 1990s. The standard was developed in response to the growing need for organizations to systematically manage and protect sensitive information in an increasingly digital business environment. ISO 27001 has since been revised, with major updates released in 2013 and 2022 to address evolving cybersecurity threats and best practices.


Industry Value and Importance


ISO 27001 is globally recognized as the leading standard for information security management systems (ISMS) and is valued for providing a systematic, risk-based approach to protecting sensitive data. Organizations that achieve ISO 27001 certification demonstrate to clients, partners, and regulators that they have implemented comprehensive security controls and are committed to maintaining confidentiality, integrity, and availability of information. The certification is particularly important for organizations handling sensitive data, as it helps meet regulatory compliance requirements, reduces security incidents, builds customer trust, and often provides a competitive advantage in procurement processes where information security assurance is required.

Certified Security Testers By Israeli Cyber Directorate
[05] Notable Clients
  • Jerusalem Municipality
  • Gordon Academic College
  • Shorouk Desalination Plant