Client Projects

References

Strategic consulting and technical implementation, in the same projects, with the same teams.

Discuss a Reference Project

Our Clients

Selected Clients.

Vuca Simulations (Bruncken & Gebhardt GmbH)

Client Testimonials

What Clients Say.

“Blackfort Technology accompanied us through ISO 27001 certification professionally and pragmatically. The combination of strategic consulting and technical implementation expertise is rare.”

CTO, mid-sized software company

“Blackfort's DORA Readiness Analysis clearly showed us where we stand and what we need to do. The roadmap was realistic and actionable.”

Head of IT Security, financial services provider

“The penetration test uncovered several critical vulnerabilities in our web application that we would not have found without this external perspective.”

IT Manager, e-commerce company

Expertise & external recognition

Publications, contributions & talks.

Widely cited analysisIncident Analysis·May 5, 2026

DNSSEC Failure in the .de Zone: Why bahn.de, spiegel.de and blackfort-tec.de Returned SERVFAIL

Technical deep-dive into the DENIC DNSSEC incident of May 5, 2026: identifies the malformed RRSIG record (keytag 33834) at TLD level from public DNS data and explains why only DNSSEC-validating resolvers were affected.

Read article →

Featured in

Quotes translated from the German originals.

heise online / c’t
A YouTube explainer "Warum .de-Domains plötzlich nicht mehr erreichbar waren" (editor: Malte Kirchner) names Blackfort Technology explicitly as the source of the technical assessment and links our analysis in the video description.
Watch video →
IT-Administrator Magazin
“A technical analysis by the IT security firm Blackfort Technology provides more specific clues about the trigger.”
Read article →
Golem.de · Marc Stöckel · May 6, 2026
“More information is, however, already available at the cybersecurity firm Blackfort Technology. They have published two reports on the incident: a simplified version and a more detailed technical analysis.”
Read article →
Golem.de · Günter Born · May 6, 2026
“A detailed breakdown of which DNS services were affected and how it all fits together was provided by blackfort-tec.de.”
Read article →
smartzone.de
“A technical analysis by the IT security firm Blackfort Technology now paints a clearer picture.”
Read article →

GuideLead author

Allianz für Cyber-Sicherheit (BSI) · AI Security Expert Circle

September 29, 2025

Guide to Penetration Testing of Large Language Models (LLMs)

Practitioner guide for the organisational, technical and legal preparation and execution of penetration tests on LLM-based systems, from threat modelling and OWASP LLM Top 10 methodology to audit-ready documentation.

AI SecurityLLMPenetration TestingBSIOWASP

ACS landing page →PDF →

TalkSpeaker

Allianz für Cyber-Sicherheit · Partner offering

May 20, 2025

Vulnerability Management in Practice: Implementing DORA and other Regulatory Requirements

Webinar translating regulatory requirements into technical measures: selection and integration of vulnerability scanners, web application testing, SBOMs for third-party libraries and audit-ready documentation.

DORAVulnerability ManagementRegulationKRITIS

ACS announcement →

Project Examples

Selected Projects.

Financial Services

DORA Gap Analysis and Compliance Roadmap

Comprehensive analysis of DORA readiness for a payment services provider with prioritization of measures and creation of a realistic implementation plan.

DORAGap AnalysisFinancial Sector

Energy Supply

ISMS Build-Up per ISO 27001

Supporting a regional energy supplier in building and certifying an information security management system per ISO 27001.

ISO 27001Critical InfrastructureISMS

Software & SaaS

SBOM Integration into CI/CD Pipeline

Integration of SBOM generation and continuous vulnerability monitoring into the development pipeline of a SaaS provider.

SBOMCRADevSecOps

Telecommunications

TKG §166 Security Concept

Creation and review of a TKG §166-compliant security concept for a regional telecommunications provider.

TKG §166BNetzASecurity Concept

IT Service Provider

Active Directory Hardening

Comprehensive hardening of an Active Directory environment including BloodHound analysis, tiering concept, and implementation of privileged access control.

Active DirectoryHardeningPAM

Manufacturing

Penetration Test and NIS2 Readiness

Combined project: network penetration test and NIS2 impact analysis for a mid-sized industrial company with OT environment.

PentestNIS2OT Security

Kontakt aufnehmen

Your Project with Blackfort Technology

Talk to us about your security challenges: specific, without obligation and on equal terms.

Beratungsgespräch anfragen