TandemSec | Ethical Hacking, Hacking Courses, Penetration testing

About us

At TandemSec, we think like hackers. As ethical hackers, whose task is to help you verify whether your systems are resistant to the attacks of "bad" hackers - real attackers, whose motivation is usually to monetize your data or steal company know-how.

TandemSec was founded by two friends and IT security enthusiasts who want to use the many years of experience gained in the implementation of security services for customers from the banking, telco, and energy sectors, as well as for medium and small businesses and government.

Penetration testing

Do you want to find out whether your IT systems are resistant to the attacks of hackers? Penetration testing allows you to find the weak spots in your systems before they can be exploited. Our ethical hackers will check your systems thoroughly for any vulnerabilities which might eventually lead to leaks of sensitive data, know-how, or client information.

We conduct penetration tests using the OWASP, OSSTMM, NIST, and other respected methodologies. We employ a wide range of commercial as well as publically available tools along with detailed manual testing to precisely simulate the attacks of actual hackers.

The output of our testing comes in the form of a detailed report with technical descriptions of every weakness we encounter as well as recommendations for removing them. A management summary is also included.

Below you will find a list of typical penetration test types per specific areas. We approach each client individually and with flexibility and we propose and realize each penetration test to exactly suit their specific IT system or ecosystem.

Web Application Penetration Test

External Infrastructure Penetration Test

Internal Infrastructure and AD Penetration Test

Wi-Fi Penetration Testing

Mobile Application Penetration Test

Compiled App / Thick Client Penetration Test

Social Engineering Penetration Test

IoT Penetration Test

Hacking Courses

We have gained our knowledge through many years of practice
and experience and we are happy to share it with you. ...

Explore the mysterious world of hacking and its many nooks and corners. Sharing his knowledge with you on this exciting journey will be the co-founder of TandemSec and ethical hacker with many years of experience, Lukáš Antal

Lukáš Antal – Lecturer and Ethical Hacker

Ever since he was a child, Lukáš had a curious mind and liked finding out how things work. As soon as he got his first computer, he decided to focus his curiosity on the cyberworld, discovering its challenges and breaking through its security boundaries. After grammar school, he enrolled in the Faculty of Information Technology – BUT in Brno. There, he was excited to find out that there exists a job where he would actually be paid for his greatest hobby - hacking.

And so he became an ethical hacker. Today he has been involved in the area of IT security for 15 years and has extensive experience with penetration testing for major companies in banking, telecommunications, and utilities as well as for government and state institutions. Having worked as an employee for 10 years, he decided to use his expertise in a company of his own – TandemSec a company he co-founded. In addition to the usual security of web applications and network infrastructure, Lukáš also deals with the security of ATMs, Wi-Fi networks, mobile devices, Windows Active Directory, or RFID.

Besides actually doing hacking itself, he also enjoys speaking about it in public and has given presentations at numerous conferences (HackerFest CZ/SK, OWASP Chapter Meeting, the Security conference, Barcamp, OpenAlt, and more) and appeared as a guest in the academic sphere, specifically at Czech and Slovak universities. In addition to IT, his other passion is traveling and exploring new cultures.

Lukáš is a Certified Information Systems Security Professional (CISSP) and Certified Ethical Hacker (CEH) and he is always ready to share his expert knowledge as an ethical hacker in the following courses:

Hacking in Practice 1

This three-day course covers three extensive topics: Social Engineering, Hacking Windows and Active Directory, and Wi-Fi Hacking.

What is the easiest way to hack a bank? Is everything that looks like an ordinary USB drive really just a harmless USB drive? What is the easiest way to hack a password? Can you fake a caller ID? How do you map a network and pick your target? How to quietly compromise a Windows station and gradually escalate your privileges all the way up to the level of the domain administrator - the overlord of the Windows network? Can you break through WEP, WPA, WPA2, or even WPA3? Are Enterprise Wi-Fi networks more secure than the ones we have at home? How do you hack a Wi-Fi network using nothing but your phone? All these and many other questions will be answered during the Hacking in Practice 1 course.

Hacking in Practice 1 – Full Curriculum

Hacking in Practice 2

This three-day course directly follows up the Hacking in Practice 1 course. We will continue in talking about Windows security, this time focusing on user work stations – how to hack them and how to secure them. While discussing network security we will demonstrate methods of compromising Linux servers. Another important topic of the course is web app security, hacking IoT and mobile phones, ATM security, VoIP security, and much more.

Hacking in Practice 2 – Full Curriculum

Don’t Get Hacked! – Training for employees

This is a half-day training for end-users. Stand the ethical hacker right in front of your employees. Because the employees are the easiest and most likely targets of hackers, let them hear about real-life attacks. It is the best (not to mention entertaining) way for them to get an idea of how many options attackers actually have, what types of attacks they use, and how to defend against them. A Follow-up discussion is also an important part of this training.