DE/EN

Dr. Wetter IT-Consulting

With 30 years of IT security expertise and always staying on the cutting edge, we help you operate your systems and software securely, protect your data, and defend against AI-based threats.
pentest

Pentest / Security Testing

How secure are your (web) applications, networks, systems, or cloud/container environments?

We conduct thorough pentests / security tests —either on a time-and-materials basis or for a fixed price.
  All our assessments are always tailored to each client’s specific needs and are based on your business and current information security requirements. They are conducted meticulously, both manually and with the support of tools. You will receive a comprehensive, manually prepared report, prioritized by technical risks. It explains the findings in detail and in a clear, understandable manner for the technical team (and, optionally, management) and provides guidance on how to address them. Streamlined assessments, AI-assisted, or agent-driven tests are available.
more ⇒
consulting

Organizing Infosec

Information security must be consistently embedded throughout your organization —starting with governance, including policies and processes, your infrastructure, software development, and, last but not least, all employees. It must not be an afterthought but must always be an integral part of everything.

In various roles we help to you top professionally organize information security —e.g. by performing gap analyses or by conducting audits of the state of your IT organization or parts thereof, recommend and plan prioritized measures to address the shortcomings them and provide assistance implementing the measures. With our many years of expertise, staying on the cutting edge of things, we can also help you to protect you against the wider range of threats posed by AI.
more ⇒
defense

Securing / Investigating

Do you want to sustainably secure systems or web applications? Or do you want to know what happened after a security incident?

We analyze and protect your IT infrastructure —from monolithic or virtualized systems to modern container solutions. We ensure that your systems meet current standards or becoming more secure by further harden your applications, systems and networks —whether they are exposed or in your LAN. Also we protect legacy systems.

In the case of compromised systems, we help manage incidents, ensuring a structured response to minimize damage and restore operations. Or conduct a computer forensic investigation ourselves to determine who did what and when.
more ⇒
Noteworthy
Talk (8/2025) at Norway's largest Infosec Conference PDF
Software (4/2026): Release of testssl.sh 3.2.0 (github).
Research: Chinese spyware on Android discovered, Norwegian News, Reuters message
Talk @ OWASP Belgium Docker Threat Modeling & Top 10
Presentation Docker 201 Security @ OWASP AppSec 2018 (London)
Article at heise developer about the OWASP Top 10 2017.
Talk @ heise devsec() 2017.
Presentation at HackPra at RUB (Slides, Video).
Talk @ OWASP AppSec Europe 2015 (Amsterdam): (In)security of HTTP Headers, (Video)
Article: iX Interview with crypto legend Phil Zim­mer­mann.
Interview in "IT Grundschutz".
Blog: Remarkable Se­cu­rity vul­nerability at Amazon discovered