Web application penetration testing

With over a decade of hands-on offensive security experience, we have been conducting web application penetration tests long before the era of AI agents—securing major organizations and institutions across every major Linux distribution and Unix OS.

Beyond penetration testing, we deliver deep-dive code reviews, custom WAF deployments, and strategic security consulting.

Android & Linux Embedded penetration testing & security

we can help you manage the security of your custom devices, including smart TV’s, mobile devices, home/office alarm systems and Smart home systems. We have extensive “hands on experience” with Smart TV’s in particular and have worked for one of the biggest corporations in the world. We are sure we will be able to help you.

0-day EXPLOIT RESEARCH

“0 Day exploit research” – Our experts will search your hardware or software product for “0 day” vulnerabilities. Finding “0 days” might be a long and complex process, but we have already helped one of the biggest corporations in the world to prevent 0 days in their product, so we would like to help your corporation to get prepared for cyber attacks and zero days.

Android Compromise Assessment

Welcome To Tyr Data Security, We do cyber since 2009.


Trusted since 2009. Operating long before “cybersecurity” became a corporate buzzword, Tyr Security provides battle-tested offensive security, advanced vulnerability research, and intelligence-grade threat mitigation for enterprises, SMBs, and high-stakes projects.


Core Capabilities & Services

1. Offensive Security & Penetration Testing

We break things before hackers do. Comprehensive manual and automated testing across all attack surfaces: Web & Mobile Applications: Black-box and white-box assessments, SaaS architectures, API security, and WAF bypass analysis.

Infrastructure & Hardware: Network appliances, firewall policies, Unix/Linux environments, and IoT/smart devices.

Android & Embedded Security: Deep security evaluations for custom Android devices, smart TVs, and smart-home/alarm systems.

2. Advanced Vulnerability Research & 0-Day Defense

0-Day Exploit Research: Rigorous hardware and software analysis to uncover and patch zero-day vulnerabilities before threat actors leverage them. Proven track record of securing systems for global-scale corporations.

APT Simulation: Tailored Advanced Persistent Threat (APT) attack simulations to test your infrastructure against nation-state or sophisticated criminal methodologies.

3. Secure Development & S-SDLC

Code Review: Deep-dive manual code reviews for high-risk software, web applications, and standalone C++ codebases.

Defense Deployment: Expert deployment of security controls, including EDR’S (both for linux and android) IDS/IPS, WAF, SQL firewalls, SELinux, DLP, and custom monitoring sensors (open-source and proprietary).

Unlike conventional Israeli intelligence firms that rely solely on open-source data, Tyr Security provides specialized Human Intelligence (HUMINT) and discrete field operations.

Leveraging former intelligence officer tradecraft, native linguistic capabilities, and undercover field operatives—including trained female assets for targeted social engineering and information extraction, we  deliver critical access that others don’t.

Our Field & Intelligence Capabilities Include:

HUMINT & Targeted Asset Operations: Elicitation, undercover human approaches, and direct information extraction from key targets.

Corporate Competitive Intelligence & Due Diligence: Uncovering supply-chain risks, internal threats, and deep background profiles.

Underground Threat Intelligence & Infiltration: Infiltrating closed Darknet forums, IRC networks, and private hacking groups—backed by native Arabic fluency and established access across regional digital undergrounds.

Extortion & Reputation Protection: Unmasking and neutralizing commercial reputation terrorists, online extortionists, and coordinated smear campaigns.

Why Tyr Security?

Decades of Low-Level Mastery: 15+ years specializing in Unix/Linux internals, kernel-level operations, and complex architectures.

Intelligence-Grade Methodology: Combining offensive hacker intuition with structured intelligence collection.

Direct, Pragmatic Execution: No bloated consulting jargon—just rigorous engineering, actionable reporting, and real-world results.

Ready to secure your infrastructure?


Android Compromise Assessment.

Suspect your phone is compromised? We conduct deep security examinations of Android endpoints, combining real-time system log analysis (logcat) with live traffic monitoring via custom Android EDR proxy software. My investigations actively hunt for hidden malware, stalkerware, and nation-state (APT-grade) spyware, including Pegasus, FinFisher, and zero-day implants.

This is not an automated antivirus scan — it is a rigorous, low-level forensic inspection of your actual device

RUNTIME LOGCAT ANALYSIS

deep inspection of system and application logs to uncover suspicious processes, permission abuse, and hidden activity invisible on the surface.

TARGETED THREAT HUNTING

IOC matching and behavioral analysis for APT-grade spyware (Pegasus and equivalents), stalkerware, banking trojans, and RATs

CUSTOME EDR PROXY

all device traffic passes through my own monitoring software, revealing command-and-control communication, data exfiltration, and connections to known malicious infrastructure

PERSISTENCE AND PRIVILEGE CHECKS 

accessibility service abuse, device admin exploitation, root indicators, suspicious app permissions

Intelligence.

Threat Intelligence & Corporate Competitive Intelligence.

Tyr Security serves our clients with intelligence that enables you to better understand your business environment, potential business risks, and, in some cases, new business opportunities. We perform such intelligence operations without breaking any laws, utilizing advanced human behavior methodologies to obtain the information our clients need. At the end of the process, you will receive a comprehensive written report tailored to your intelligence requirements.

This may include: key players in the industry, future R&D strategies, products in the pipeline, HR plans, points of conflict, corruption, fraud, or bribery. We gather information from OSINT and through specialized HUMINT tactics, analyzing the data to deliver an actionable final report.

We are currently capable of operating in the following locations: Europe, Israel, the Palestinian Authority (Hebrew, Arabic), We specialize in the Israeli-Palestinian and German markets.

Know the next step of your competitors

e will take the necessary steps to get the information you need from marketing departments. If they have made plans, we will get those plans for you. Our intelligence reports will help you to better understand your target and situation. Our lawyers follow

our teams while in action to verify we are adhering to local regulations and privacy laws.

What your compitotrs can know about you only from OSINT?

I’ts better check those issues before your enemies does, sometimes we leave way too many traces behind, those traces can lead sometimes to complete exploitation of your firm and assets, let us check your OSINT posture before the bad guys does.

Specializing in the German & Arabic languages

We have experience working within the Arabic communities of Europe & we have strong connections with other private label intelligence firms all over the arabic world.

if you are speaking Arabic please try the dictionary app our CEO has created: Milon Mabsut –  https://play.google.com/store/apps/details?id=com.mabsut.milonia


Competitive intelligence

Competitive intelligence is an ethical and legal business practice. Industrial espionage, on the other hand, is illegal and unfortunately

used by small and big corporations alike. Your legal choice is to use competitive intelligence to get ahead of your competitors. Savvy managers

are getting competitive intelligence reports about their targets before closing important and sensitive deals.

Don’t fall behind!



Civil intelligence & Threat Intelligence 

In an increasingly volatile global landscape, both cyber threats and physical crime are escalating across Europe and the broader Western world. From widespread civil unrest to sophisticated digital extortion, private individuals, SMBs, and large corporations face unprecedented security risks. Traditional law enforcement resources are frequently overburdened, leaving victims without immediate resolution.

At Tyr Security, our Civil Intelligence division bridges this critical capability gap. We provide actionable intelligence, threat mitigation, and strategic support to help individuals and businesses navigate, manage, and resolve complex security crises.

We Do Cyber Security before the term “cyber” was coined.

Contact us

The best way to contact us is via telephone call, but you can send an email too.

contact information

We are located in Herzliya, ISRAEL!

eran@tyrsecurity.com

or to reach Eran (Tyr’s CTO)
directly :Mobile : + 972 52 5326350
To get TOX chat details please contact us first via email.
We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners. View more
Cookies settings
Accept
Privacy & Cookie policy
Privacy & Cookies policy
Cookie name Active

If

.

Privacy Policy
Privacy Policy for www.tyrsecurity.com

If you require any more information or have any questions about our privacy policy, please feel free to contact us by email at info@tyrsecurity.com or call +972 525326350

WE DO NOT KEEP ANY INFO ABOUT THE USER IN ORDER TO COMPLY WITH ISRAELI LAW חוק הגנת הפרטיות, התשמ"א–1981 (כולל תיקון 13)

WE DONT NEED YOUR INFO THUS WE DO NOT SAVE IT, IP ADDRESS ONLY BEING KEPT AND DELETED AFTER 24 HOURS, WE DO NOT HAVE ANY DATA BASE OF USERS ETC.

but just in case for legal issue, here is a declarion.

At www.tyrsecurity.com, the privacy of our visitors is of extreme importance to us. This privacy policy document outlines the types of personal information is received and collected by www.tyrsecurity.com and how it is used.

we complay the EU GDPR law thus we list in detail how we handle, store and process user data :

אני מאשר/ת כי ידוע לי ומוסכם עלי כי הפרטים שמסרתי ייאספו, יוחזקו ויעובדו במאגר מידע בהתאם להוראות חוק הגנת הפרטיות, התשמ"א–1981 (כולל תיקון 13), ולמטרות המפורטות במדיניות הפרטיות של האתר . ידוע לי כי מסירת המידע נעשית מרצוני החופשי, וכי עומדות לי הזכויות המוקנות לי לפי החוק, ניתן לסרב לעשות שימוש בעוגיות באתר, בכל מקרה איננו שומרים שום פרט מזהה של הלקוח שגולש באתר.

Log Files
Like many other Web sites, www.tyrsecurity.com makes use of log files. The information inside the log files includes internet protocol ( IP ) addresses, type of browser, Internet Service Provider ( ISP ), date/time stamp, referring/exit pages, and number of clicks to analyze trends, administer the site, track user’s movement around the site, and gather demographic information. IP addresses, and other such information are not linked to any information that is personally identifiable.
we do not keep the log files, they reset every 24 hours, only data kept there is browswer type and ip addres, we do not have any forms in the site, and we do not keep any info about the user.

Cookies and Web Beacons
www.tyrsecurity.com does use cookies to store information about visitors preferences, record user-specific information on which pages the user access or visit, customize Web page content based on visitors browser type or other information that the visitor sends via their browser.

DoubleClick DART Cookie
Google, as a third party vendor, uses cookies to serve ads on www.tyrsecurity.com.
Google's use of the DART cookie enables it to serve ads to users based on their visit to www.tyrsecurity.com and other sites on the Internet.
Users may opt out of the use of the DART cookie by visiting the Google ad and content network privacy policy at the following URL - http://www.google.com/privacy_ads.html

Some of our advertising partners may use cookies and web beacons on our site. Our advertising partners include
Google Adsense
Clickbank

These third-party ad servers or ad networks use technology to the advertisements and links that appear on www.tyrsecurity.com send directly to your browsers. They automatically receive your IP address when this occurs. Other technologies ( such as cookies, JavaScript, or Web Beacons ) may also be used by the third-party ad networks to measure the effectiveness of their advertisements and / or to personalize the advertising content that you see.

www.tyrsecurity.com has no access to or control over these cookies that are used by third-party advertisers.

You should consult the respective privacy policies of these third-party ad servers for more detailed information on their practices as well as for instructions about how to opt-out of certain practices. www.tyrsecurity.com's privacy policy does not apply to, and we cannot control the activities of, such other advertisers or web sites.

Removal of user data accoding to GDPR
We will be happy to delete any user data such as logged IP address and or data we save for analytics puposses such as browser type, Ip address and so on, in such case please email us to info@tyrsecurity.com and we will remove you asap, we will send you a confirmation email about the removal, by contacting us asking to delete all of your user data you allow us to send you a confirmation email.

Data Secyruty
we keep all of our data safe on a secure server and we perform montly penetration testings in order to secure our data

Duration of saving user data
we will save the user data such as log files with IP address and "user agent" such as browser type for up to 1 month

If you wish to disable cookies, you may do so through your individual browser options. More detailed information about cookie management with specific web browsers can be found at the browsers' respective websites.

Save settings
Cookies settings
Under Attack? Call us now!