{"id":4522,"date":"2026-02-10T21:31:03","date_gmt":"2026-02-10T20:31:03","guid":{"rendered":"https:\/\/sys.buges.sk\/penetracne-testovanie-infrastruktury\/"},"modified":"2026-08-29T17:57:45","modified_gmt":"2026-08-29T15:57:45","slug":"penetracne-testovanie-infrastruktury","status":"publish","type":"page","link":"https:\/\/sysnetshield.com\/sk\/penetracne-testovanie-infrastruktury\/","title":{"rendered":"Penetra\u010dn\u00e9 testovanie infra\u0161trukt\u00fary"},"content":{"rendered":"\n
\n
\n
\n

Penetra\u010dn\u00e9 testovanie infra\u0161trukt\u00fary<\/strong><\/h1>\n\n\n\n

Penetra\u010dn\u00fd test infra\u0161trukt\u00fary je kontrolovan\u00e1 simul\u00e1cia kybernetick\u00e9ho \u00fatoku zameran\u00e1 na va\u0161e servery, sie\u0165ov\u00e9 zariadenia, opera\u010dn\u00e9 syst\u00e9my a slu\u017eby. Cie\u013eom je identifikova\u0165 zranite\u013enosti, ktor\u00e9 by mohol skuto\u010dn\u00fd \u00fato\u010dn\u00edk zneu\u017ei\u0165 na prienik do va\u0161ej siete, eskal\u00e1ciu opr\u00e1vnen\u00ed alebo pr\u00edstup k citliv\u00fdm \u00fadajom. <\/p>\n\n\n\nNez\u00e1v\u00e4zn\u00e1 konzult\u00e1cia<\/a>\n<\/div>\n<\/div>\n<\/section>\n\n

\n
\n

Extern\u00fd penetra\u010dn\u00fd test<\/h2>\n\n\n\n

Testujeme konfigur\u00e1ciu syst\u00e9mov, sie\u0165ov\u00fa segment\u00e1ciu, spr\u00e1vu pr\u00edstupov, politiky hesiel a \u010fal\u0161ie bezpe\u010dnostn\u00e9 mechanizmy. V\u00fdstupom je podrobn\u00e1 spr\u00e1va s n\u00e1jden\u00fdmi zranite\u013enos\u0165ami, d\u00f4kazom ich zneu\u017eite\u013enosti a konkr\u00e9tnymi odpor\u00fa\u010daniami na n\u00e1pravu. <\/p>\n\n\n\n

Extern\u00fd penetra\u010dn\u00fd test simuluje \u00fatok z prostredia internetu \u2013 teda z poh\u013eadu \u00fato\u010dn\u00edka, ktor\u00fd nem\u00e1 \u017eiadny pr\u00edstup do va\u0161ej internej siete.<\/p>\n\n\n\n

Zameriavame sa na v\u0161etko, \u010do je z va\u0161ej infra\u0161trukt\u00fary dostupn\u00e9 zvonku: verejne pr\u00edstupn\u00e9 servery, e-mailov\u00e9 br\u00e1ny, VPN koncentr\u00e1tory, webov\u00e9 aplik\u00e1cie, DNS servery a \u010fal\u0161ie exponovan\u00e9 slu\u017eby.<\/p>\n\n\n\n

H\u013ead\u00e1me chybn\u00e9 konfigur\u00e1cie, neaktualizovan\u00e9 syst\u00e9my, slab\u00e9 \u0161ifrovacie protokoly a \u010fal\u0161ie zranite\u013enosti, ktor\u00e9 by \u00fato\u010dn\u00edkovi umo\u017enili z\u00edska\u0165 po\u010diato\u010dn\u00fd pr\u00edstup do va\u0161ej organiz\u00e1cie. Test odhal\u00ed, ako va\u0161a firma vyzer\u00e1 o\u010dami \u00fato\u010dn\u00edka z internetu, a uk\u00e1\u017ee, kde je potrebn\u00e9 posilni\u0165 obrann\u00fa l\u00edniu. <\/p>\n\n\n\n

Zauj\u00edma v\u00e1s sk\u00f4r test webovej aplik\u00e1cie? Prejdite na str\u00e1nku Penetra\u010dn\u00e9 testovanie webovej aplik\u00e1cie<\/a>, alebo si pozrite preh\u013ead penetra\u010dn\u00fdch testov<\/a>. <\/p>\n<\/div>\n<\/section>\n\n

\n
\n

Intern\u00fd penetra\u010dn\u00fd test<\/h2>\n\n\n\n

Intern\u00fd penetra\u010dn\u00fd test simuluje situ\u00e1ciu, ke\u010f sa \u00fato\u010dn\u00edk u\u017e nach\u00e1dza vo vn\u00fatri va\u0161ej siete \u2013 napr\u00edklad po \u00faspe\u0161nom phishingovom \u00fatoku<\/a>, kompromit\u00e1cii zamestnaneck\u00e9ho zariadenia alebo zneu\u017eit\u00ed fyzick\u00e9ho pr\u00edstupu.<\/p>\n\n\n\n

Zameriavame sa na sie\u0165ov\u00fa segment\u00e1ciu, konfigur\u00e1ciu Active Directory, spr\u00e1vu opr\u00e1vnen\u00ed, zdie\u013ean\u00e9 sie\u0165ov\u00e9 prostriedky a mo\u017enosti later\u00e1lneho pohybu medzi syst\u00e9mami.<\/p>\n\n\n\n

Testujeme, ako \u010faleko sa \u00fato\u010dn\u00edk dok\u00e1\u017ee dosta\u0165 od po\u010diato\u010dn\u00e9ho pr\u00edstupu k najcennej\u0161\u00edm akt\u00edvam va\u0161ej organiz\u00e1cie \u2013 dom\u00e9nov\u00e9mu radi\u010du, datab\u00e1zam s citliv\u00fdmi \u00fadajmi alebo riadiacim syst\u00e9mom. V\u00fdsledok uk\u00e1\u017ee, \u010di va\u0161a vn\u00fatorn\u00e1 obrana dok\u00e1\u017ee \u00fato\u010dn\u00edka zastavi\u0165 alebo aspo\u0148 detegova\u0165. <\/p>\n<\/div>\n<\/section>\n\n

\n
\n
\n
\n\"Kolegovia\n<\/div>\n\n\n
\n

Penetra\u010dn\u00fd test cloudu<\/h2>\n\n\n\n

Penetra\u010dn\u00fd test cloudov\u00e9ho prostredia preveruje bezpe\u010dnos\u0165 va\u0161ej infra\u0161trukt\u00fary prev\u00e1dzkovanej v cloude \u2013 \u010di u\u017e ide o Microsoft Azure, Amazon AWS, Google Cloud Platform alebo in\u00e9ho poskytovate\u013ea.<\/p>\n\n\n\n

Zameriavame sa na konfigur\u00e1ciu cloudov\u00fdch slu\u017eieb, spr\u00e1vu ident\u00edt a pr\u00edstupov (IAM), nastavenie \u00falo\u017e\u00edsk, sie\u0165ov\u00fdch pravidiel, \u0161ifrovanie \u00fadajov a bezpe\u010dnos\u0165 virtu\u00e1lnych strojov aj kontajnerov.<\/p>\n\n\n\n

Chybn\u00e1 konfigur\u00e1cia cloudov\u00e9ho prostredia patr\u00ed medzi naj\u010dastej\u0161ie pr\u00ed\u010diny bezpe\u010dnostn\u00fdch incidentov. Testujeme, \u010di va\u0161e nastavenie zodpoved\u00e1 osved\u010den\u00fdm postupom a \u010di \u00fato\u010dn\u00edk nem\u00f4\u017ee zneu\u017ei\u0165 prehnan\u00e9 opr\u00e1vnenia, verejne pr\u00edstupn\u00e9 \u00falo\u017eisk\u00e1 alebo ch\u00fdbaj\u00facu segment\u00e1ciu na prienik do v\u00e1\u0161ho prostredia. <\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n

\n
\n

Ako prebieha penetra\u010dn\u00fd test?<\/h2>\n\n\n\n
\n
\n
1<\/div>\n\n\n\n

\u00davodn\u00e1 konzult\u00e1cia<\/h3>\n\n\n\n

Spolo\u010dne definujeme rozsah testovania, ciele a o\u010dak\u00e1vania. (1 \u2013 2 dni) <\/p>\n<\/div>\n\n\n\n

\n
2<\/div>\n\n\n\n

Pl\u00e1novanie a pr\u00edprava<\/h3>\n\n\n\n

Formalizujeme spolupr\u00e1cu \u2013 podpis NDA, zmluvy a pravidiel zapojenia (Rules of Engagement). (1 \u2013 3 dni) <\/p>\n<\/div>\n\n\n\n

\n
3<\/div>\n\n\n\n

Vykonanie testu<\/h3>\n\n\n\n

Akt\u00edvna f\u00e1za testovania \u2013 kombin\u00e1cia automatizovan\u00fdch n\u00e1strojov a manu\u00e1lnych techn\u00edk. (5 \u2013 15 dn\u00ed) <\/p>\n<\/div>\n\n\n\n

\n
4<\/div>\n\n\n\n

Anal\u00fdza a reporting<\/h3>\n\n\n\n

D\u00f4kladne analyzujeme v\u0161etky n\u00e1lezy a klasifikujeme ich pod\u013ea z\u00e1va\u017enosti (CVSS sk\u00f3re). (3 \u2013 5 dn\u00ed) <\/p>\n<\/div>\n\n\n\n

\n
5<\/div>\n\n\n\n

Prezent\u00e1cia v\u00fdsledkov<\/h3>\n\n\n\n

V\u00fdsledky prezentujeme zrozumite\u013ene \u2013 executive summary pre mana\u017ement aj detailn\u00e1 technick\u00e1 spr\u00e1va pre IT t\u00edm. (1 de\u0148) <\/p>\n<\/div>\n\n\n\n

\n
6<\/div>\n\n\n\n

Retesting<\/h3>\n\n\n\n

Po implement\u00e1cii opr\u00e1v vykon\u00e1me opakovan\u00e9 testovanie. (2 \u2013 3 dni) <\/p>\n<\/div>\n<\/div>\n\n\n\n

\nNez\u00e1v\u00e4zn\u00e1 konzult\u00e1cia<\/a>\n<\/div>\n<\/div>\n<\/section>\n\n
\n
\n

Pre\u010do SysnetShield?<\/h2>\n\n\n\n

Na trhu je rad firiem, ktor\u00e9 pon\u00fakaj\u00fa bezpe\u010dnostn\u00e9 slu\u017eby. Tu je konkr\u00e9tny rozdiel \u2013 a \u013eudia, ktor\u00ed za n\u00edm stoja: <\/p>\n\n\n\n

\n
\n\"Patrik<\/a>\n\n\n\n

Patrik \u017d\u00e1k<\/a><\/p>\n\n\n\n

Etick\u00fd hacker a Red Teamer so zameran\u00edm na infra\u0161trukt\u00faru<\/p>\n\n\n\nProfil Patrika \u017d\u00e1ka \u2192<\/a>\n<\/div>\n\n\n\n

\n\"Juraj<\/a>\n\n\n\n

Juraj Dani\u0161<\/a><\/p>\n\n\n\n

Etick\u00fd hacker so zameran\u00edm na webov\u00e9 aplik\u00e1cie<\/p>\n\n\n\nProfil Juraja Dani\u0161a \u2192<\/a>\n<\/div>\n<\/div>\n\n\n\n

Certifik\u00e1cia t\u00edmu<\/h3>\n\n\n\n
\"CRTLCRTL<\/span>Certified Red Team Lead<\/span><\/a>\"CRTOCRTO<\/span>Certified Red Team Operator<\/span><\/a>\"CPTSCPTS<\/span>Certified Penetration Testing Specialist<\/span><\/a>\"CNPenCNPen<\/span>Certified Network Pentester<\/span><\/a>\"CCPenX-AWSCCPenX-AWS<\/span>Certified Cloud Pentesting eXpert \u2013 AWS<\/span><\/a>\"C-AI\/MLPenC-AI\/MLPen<\/span>Certified AI\/ML Pentester<\/span><\/a>\"CAPenXCAPenX<\/span>Certified AppSec Pentesting eXpert<\/span><\/a>\"THMTHM WEB1<\/span>Web App Pentester Level 1<\/span><\/a>\"N\u00daKIBN\u00daKIB<\/span>Mana\u017e\u00e9r kybernetickej bezpe\u010dnosti<\/span><\/a><\/div>
\"CRTLCRTL<\/span>Certified Red Team Lead<\/span><\/a>\"CRTOCRTO<\/span>Certified Red Team Operator<\/span><\/a>\"CPTSCPTS<\/span>Certified Penetration Testing Specialist<\/span><\/a>\"CNPenCNPen<\/span>Certified Network Pentester<\/span><\/a>\"CCPenX-AWSCCPenX-AWS<\/span>Certified Cloud Pentesting eXpert \u2013 AWS<\/span><\/a>\"C-AI\/MLPenC-AI\/MLPen<\/span>Certified AI\/ML Pentester<\/span><\/a>\"CAPenXCAPenX<\/span>Certified AppSec Pentesting eXpert<\/span><\/a>\"THMTHM WEB1<\/span>Web App Pentester Level 1<\/span><\/a>\"N\u00daKIBN\u00daKIB<\/span>Mana\u017e\u00e9r kybernetickej bezpe\u010dnosti<\/span><\/a><\/div><\/div><\/div>\n\n\n\n

CRTO<\/strong> aj CPTS<\/strong> s\u00fa plne praktick\u00e9 certifik\u00e1cie \u2013 sk\u00fa\u0161kou je nieko\u013ekod\u0148ov\u00fd \u00fatok v laborat\u00f3rnom prostred\u00ed a spracovanie reportu, nie test s v\u00fdberom odpoved\u00ed.<\/p>\n\n\n\n

\u010co n\u00e1s odli\u0161uje<\/h3>\n\n\n\n
\n
\n<\/circle><\/path><\/svg><\/span>\n\n\n\n

\u0160pecializovan\u00fd t\u00edm, nie subdod\u00e1vatelia<\/h3>\n\n\n\n

Nie sme konzulta\u010dn\u00fd dom, ktor\u00fd pr\u00e1cu prepred\u00e1va. Ka\u017ed\u00fd projekt ved\u00fa priamo \u010dlenovia n\u00e1\u0161ho t\u00edmu s plnou zodpovednos\u0165ou za v\u00fdsledok. <\/p>\n<\/div>\n\n\n\n

\n<\/path><\/path><\/svg><\/span>\n\n\n\n

Manu\u00e1lna pr\u00e1ca, nielen automatizovan\u00e9 n\u00e1stroje<\/h3>\n\n\n\n

Automatick\u00e9 skenery odhalia zn\u00e1me zranite\u013enosti. Logick\u00e9 chyby, business-logic nedostatky a re\u0165azce exploitov odhal\u00ed len sk\u00fasen\u00fd tester, ktor\u00fd mysl\u00ed ako \u00fato\u010dn\u00edk. <\/p>\n<\/div>\n\n\n\n

\n<\/rect><\/rect><\/path><\/svg><\/span>\n\n\n\n

V\u00fdstupy, ktor\u00e9 sa daj\u00fa pou\u017ei\u0165<\/h3>\n\n\n\n

Spr\u00e1va nie je akademick\u00e9 cvi\u010denie. Je p\u00edsan\u00e1 tak, aby v\u00e1\u0161 dev alebo ops t\u00edm mohol hne\u010f za\u010da\u0165 s n\u00e1pravou \u2013 s konkr\u00e9tnymi krokmi a odkazmi na zdroje. <\/p>\n<\/div>\n\n\n\n

\n<\/circle><\/path><\/svg><\/span>\n\n\n\n

Scen\u00e1re na mieru, nie \u0161abl\u00f3ny<\/h3>\n\n\n\n

Ka\u017ed\u00fd projekt staviame pod\u013ea v\u00e1\u0161ho prostredia, va\u0161ich riz\u00edk a va\u0161ich cie\u013eov. Nepou\u017e\u00edvame krabicov\u00e9 metodiky ani generick\u00e9 \u0161abl\u00f3ny. <\/p>\n<\/div>\n\n\n\n

\n<\/path><\/path><\/path><\/svg><\/span>\n\n\n\n

Diskr\u00e9tnos\u0165 a ml\u010danlivos\u0165<\/h3>\n\n\n\n

Pred ka\u017ed\u00fdm projektom podpisujeme NDA. V\u0161etky inform\u00e1cie aj v\u00fdsledky zost\u00e1vaj\u00fa v\u00fdhradne medzi nami a vami. <\/p>\n<\/div>\n\n\n\n

\n<\/rect><\/path><\/svg><\/span>\n\n\n\n

S\u00falad s medzin\u00e1rodn\u00fdmi \u0161tandardmi<\/h3>\n\n\n\n

Metodol\u00f3gia vych\u00e1dza z OWASP, PTES a NIST a je v s\u00falade s NIS2 aj z\u00e1konom o kybernetickej bezpe\u010dnosti \u2013 teda s t\u00fdm, \u010do uzn\u00e1vaj\u00fa regul\u00e1tori aj aud\u00edtori.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n

\n
\n

Zistite, ako je na tom va\u0161a bezpe\u010dnos\u0165<\/h2>\n\n\n\n

Nechajte n\u00e1m kontakt a ozveme sa v\u00e1m do 24 hod\u00edn s nez\u00e1v\u00e4znou konzult\u00e1ciou. Preberieme rozsah, pr\u00edstup aj cenu. Odpovieme do 24 hod\u00edn \u00b7 nez\u00e1v\u00e4zn\u00e1 \u00favodn\u00e1 konzult\u00e1cia \u00b7 cenov\u00e1 ponuka na mieru. <\/p>\n\n\n\n

\n
\n
Nez\u00e1v\u00e4zn\u00e1 konzult\u00e1cia<\/div>\n
Odpovieme do 24 hod\u00edn<\/div>\n \n
\n

<\/p>

    <\/ul><\/div>\n
    \n
    \n<\/fieldset>\n