Comsec

Comsec Comsec is a global cybersecurity consultant leader. With over 3 decades of experience, we take a pro Comsec Global is part of the HUB Security Group(HUB.TA).

Comsec is considered one the most comprehensive Information Security companies today, and one of the only pure-play Information Security companies, with 140 multi-disciplinary security professionals. Established by veterans of the 8200 and 81 elite intelligence units of the Israeli Defense Forces. The company specializes in Cybersecurity protecting sensitive commercial and government information. HUB operates in over 30 countries and provides innovative cybersecurity on-premise and cloud appliances as well as a wide range of cybersecurity professional-services worldwide.

Comsec | Your End-to-End Cybersecurity Partner for 2027Cybersecurity in 2027 is no longer about point solutions.It requi...
16/10/2026

Comsec | Your End-to-End Cybersecurity Partner for 2027
Cybersecurity in 2027 is no longer about point solutions.
It requires continuous visibility, validated controls, regulatory alignment, and real-world testing across the entire attack surface.
At Comsec we deliver comprehensive cybersecurity services that support organizations from strategy and compliance through offensive testing and operational resilience. Letโ€™s schedule a meeting.
Our 2027 Cybersecurity Services Portfolio:
Comsec Offensive Security & Assurance
โ€ข Web, Mobile (iOS & Android), API Pe*******on Testing
โ€ข Infrastructure and Cloud Pe*******on Testing
โ€ข Red Teaming and Advanced Attack Simulations
โ€ข Secure Code Review
โ€ข Application, Infrastructure and Architecture Risk Assessments

Comsec Cloud & Architecture Security
โ€ข Cloud Security Reviews - AWS, Azure, GCP
โ€ข Cloud Pe*******on Testing - AWS, Azure, GCP
โ€ข Secure Architecture Design and Review
โ€ข Hardening Reviews for Systems and Applications
โ€ข Firewall and Network Rulebase Reviews

Comsec Compliance, Standards & Regulatory Services
โ€ข PCI DSS v4.x - QSA, ASV and Readiness Services and Audit
โ€ข ISO 27001 / ISO 27701 Readiness Services
โ€ข SOC 2 Readiness
โ€ข Regulatory Compliance for Financial Institutions, Capital Markets...
โ€ข Security Policy Frameworks and Governance Support

Comsec Continuous Security & Vulnerability Management
โ€ข External and Internal Vulnerability Assessments
โ€ข ASV Quarterly Scans
โ€ข Continuous Exposure and Risk Management Programs
โ€ข Actionable Remediation Guidance and Validation

Comsec Advisory, Strategy & CISO Services
โ€ข Cybersecurity Strategy and Roadmap Development
โ€ข CISO/vCISO and Security Leadership Services
โ€ข Security Program Maturity Assessments
โ€ข Incident Preparedness and Response Planning
And moreโ€ฆ

Why Comsec ?
โ€ข Decades of hands-on security expertise
โ€ข Global delivery with local regulatory understanding
โ€ข Vendor-agnostic, outcome-driven approach
โ€ข Focus on measurable risk reduction, not checklists

Let Comsec be your trusted security partner.
๐Ÿ“ฉ Contact us today: [email protected]

*******onTesting

14/10/2026

PCI DSS Cloud Certification with Comsec Expertise You Can Trust
Managing PCI DSS compliance in cloud environments demands more than technical knowledge it requires deep regulatory understanding, architectural insight, and a partner who can translate complex requirements into executable, business aligned controls.
At Comsec we specialize in PCI DSS certification for organizations operating in the cloud. Our team brings extensive experience in cloud centric payment environments, helping clients design secure architectures, validate controls, and demonstrate compliance to acquirers and assessors with confidence.

Comsec cloud focused PCI DSS services include:
โ€ข High level readiness and gap analysis for cloud hosted cardholder data environments.
โ€ข Strategic guidance on cloud architecture, segmentation, and shared responsibility alignment.
โ€ข End to end support for remediation, documentation, and QSA readiness.
โ€ข Professional, board level ready reporting and risk narrative.

For organizations seeking a partner with proven expertise in PCI DSS in the cloud, Comsec provides the precision, governance, and credibility required to strengthen security posture and compliance.
If you are preparing for PCI DSS certification in a cloud environment, itโ€™s time to speak with Comsec.

Comsec| Trusted PCI DSS QSA
๐Ÿ“ฉ Contact us today

DSS

Short, Punchy & Direct (Focus on Manual Testing)A "clean" automated security scan does NOT mean your application is secu...
12/10/2026

Short, Punchy & Direct (Focus on Manual Testing)
A "clean" automated security scan does NOT mean your application is secure. ๐Ÿšจ
Automated tools are great for catching low-hanging fruit, but they can't understand business logic. They can't simulate the creative, persistent mindset of a human hacker.
Thatโ€™s where Comsec comes in.
Our Application Pe*******on Testing relies on top-tier human intelligence. Our ethical hackers manually poke, prod, and exploit your applications uncovering the complex vulnerabilities that machines miss.
Real threats require real expertise. Stop relying on check-the-box security. Secure your web and mobile apps with the experts at Comsec today. ๐Ÿ›ก๏ธ

Comsec | Trusted Advisor
๐Ÿ“ฉ Contact us today: [email protected]

ISO 27001:2022 isn't just a certification. It's a powerful trust signal to your customers, partners, and investors.Since...
11/10/2026

ISO 27001:2022 isn't just a certification. It's a powerful trust signal to your customers, partners, and investors.
Since 1987, Comsec has partnered with hundreds of clients globally, across all industries, to turn compliance into a competitive advantage. Our GRC experts guide you from initial gap analysis to full audit readiness, ensuring you meet the highest standards while accelerating your business growth.
Comsec provide end-to-end readiness and security programs:

๐Ÿ”น ISO 27001:2022 Readiness
๐Ÿ”น SOC 2 Readiness
๐Ÿ”น GDPR Readiness
๐Ÿ”น Web & Mobile App Pen Tests

Comsec delivers structured readiness programs that reduce uncertainty, streamline processes, and accelerate your certification timelines.
Donโ€™t wait for an audit to expose critical gaps. Build trust, secure your organization, and gain a clear competitive edge today.

Comsec | Trusted Advisor
๐Ÿ“ฉ Contact us now: [email protected]

Focus on Brand Trust & ComplianceBuilding customer trust takes years. Losing it takes one vulnerable application.In toda...
09/10/2026

Focus on Brand Trust & Compliance
Building customer trust takes years. Losing it takes one vulnerable application.
In today's highly regulated digital environment, a single data breach can lead to severe financial penalties and irreparable brand damage. Whether you are dealing with GDPR, HIPAA, PCI-DSS, or customer data privacy, compliance is non-negotiable.

Comsecโ€™s Application Pe*******on Testing helps you meet strict regulatory requirements while providing true security assurance.
Why industry leaders trust us:
๐Ÿ”’ Decades of global cybersecurity experience.
๐Ÿ”’ Deep expertise across complex regulatory landscapes.
๐Ÿ”’ Detailed, executive-level reporting alongside deep technical insights.

Show your clients and stakeholders that you take their data security seriously. Book your Application PT with Comsec today.
Comsec | Trusted Advisor
๐Ÿ“ฉ Contact us today: [email protected]

Before You Call Your QSA...Before your Qualified Security Assessor arrives, ask yourself:Can your team clearly explain:โœ”...
08/10/2026

Before You Call Your QSA...
Before your Qualified Security Assessor arrives, ask yourself:

Can your team clearly explain:
โœ” Your payment data flow?
โœ” Your network segmentation?
โœ” Your access control process?
โœ” Your incident response procedures?
โœ” Your evidence collection process?
Preparation leads to productive assessments.

Comsec | Trusted PCI DSS QSA
๐Ÿ“ฉ Contact us today: [email protected]

DSS Consultant DSS compliance Global cybersecurity

You can buy all the AppSec tools in the world, but if your developers aren't trained to write secure code, you are alway...
04/10/2026

You can buy all the AppSec tools in the world, but if your developers aren't trained to write secure code, you are always going to be one step behind.
Letโ€™s be honest: most security training for R&D teams consists of a generic, once-a-year compliance video. Itโ€™s dry, itโ€™s theoretical, and worst of all it has nothing to do with the actual programming languages and frameworks your team uses every day.
Developers are paid to build features and ship fast. If security isn't made practical for them, it becomes an afterthought.
At Comsec our Secure Code Training turns your developers into your strongest line of defense. We don't just preach security theory; we teach your R&D team how to think like attackers while writing code in their specific environment.
Here is how Comsec AppSec experts elevate your development team:
๐Ÿ”น Tailored to Your Tech Stack: We speak your developers' language. Whether it is Java, .NET, Python, Node.js, our training is highly relevant to what your team actually builds.
๐Ÿ”น Hands-On & Practical: We move past the OWASP Top 10 slideshows. We dive into real-world code snippets, showing exactly how vulnerabilities are introduced and how to fix them.
๐Ÿ”น Fewer Vulnerabilities, Faster Releases: By teaching developers how to code securely from day one, we drastically reduce the amount of time spent fixing bugs after a Pe*******on Test or SAST scan.
๐Ÿ”น Building a "Shift-Left" Culture: We empower your team to take ownership of security, embedding secure design principles right at the architecture and coding phases.
The Bottom Line: The cheapest and most effective time to fix a vulnerability is before the code is even committed.

Stop treating developer security training as a check-the-box exercise. Schedule a call with our AppSec team today to customize a training program that your developers will actually value.

Comsec | Trusted Advisor
๐Ÿ“ฉ [email protected]

๐Ÿšจ Red Team Cyber Attack Simulation - Test Your Defenses Before Attackers DoAt Comsec our Red Team simulations emulate re...
02/10/2026

๐Ÿšจ Red Team Cyber Attack Simulation - Test Your Defenses Before Attackers Do
At Comsec our Red Team simulations emulate real-world adversaries to assess how your organization detects, responds to, and withstands advanced cyber threats.

We simulate targeted attack scenarios tailored to your business environment, including:
๐Ÿ”น Security controls & monitoring systems
๐Ÿ”น Infrastructure, networks & cloud environments
๐Ÿ”น Critical applications & business systems
๐Ÿ”น Business processes and operational workflows
๐Ÿ”น Human-factor attack vectors (when required)

Our goal is simple:
Identify exploitable gaps, validate your detection and response capabilities, and strengthen your overall cyber resilience before a real attacker puts it to the test.

Comsec | Trusted Advisor
๐Ÿ“ฉ Contact us today: [email protected]

Address

2 Kaplan Street
Tel Aviv

Opening Hours

Monday 09:00 - 18:00
18:00 - 18:00
Tuesday 09:00 - 18:00
Wednesday 09:00 - 18:00
Thursday 09:00 - 18:00
Sunday 09:00 - 18:00

Alerts

Be the first to know and let us send you an email when Comsec posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Shortcuts

Share