The Trax99 Group's fastest-growing sector is undoubtedly cybersecurity. Trax99 designs and implements solutions for classified Defense and critical infrastructure organizations requiring a high level of IT and OT security.
We are the only Italian player to provide both TEMPEST products and services and classified networks for critical infrastructures, certification laboratories, and new cybersecurity solutions for both the military and civilian sectors.
Trax99 is at the forefront of implementing and disseminating Tempest (Telecommunications Electronics Material Protected from Emanating Spurious Transmissions) solutions, all measures designed to contain unintentional emissions from electronic devices that could compromise the security of processed data. Tempest's commitment is evidenced by recent international recognition and approval from two institutions: NATO and the Council of the European Union. This commitment extends not only to the production of Tempest equipment, but also to the development of zoning activities.
Conception and design of Tempest equipment in compliance with SDIP 27/2. New equipment is driven by individual market needs. Following the Tempest equipment design process, the prototype construction process begins for certification. Once the certification process is complete, production can begin. To allow both production and the customer to verify the equipment's compliance with SDIP 27/2, specific verification procedures are developed for each part number.
COMSEC Area Zoning Measurement Services in accordance with the NATO SDIP-28 Procedure. This measurement allows us to determine the electromagnetic attenuation achieved for a building or office in its environment. Based on the attenuation level achieved, the user determines the level of confidentiality of the digital data that can be processed in compliance with regulatory requirements.
Consulting services are available for clients who require the activity to begin with product/system analysis and develop a Tempest Test Plan for NTA approval. Once this process is complete, we offer measurement services in our shielded chambers to verify compliance with SDIP 27/2 requirements. If problems arise, we guide the client toward a suitable solution. Once implemented, the NTA approval process is completed, leading to certification.
Artificial intelligence applied to source verification. We offer a system for various sectors such as journalism, media agencies, industry 4.0, and politics. The system analyzes a large number of sources based on selected criteria, sorting them by relevance, geographic area, and time period to provide only the information you're looking for. The system's unique feature is its ability to generate search models based on specially trained AI rather than using predefined criteria.
Trax99 has evaluation laboratories preparatory to CE.VA and LVS certification, in the Military and Civilian fields and is a candidate to become LAP for the ACN.
Trax99 operates its own laboratories accredited by military institutions with an Evaluation Center (Ce.Va.) responsible for evaluating and supporting software systems used in military and critical environments towards Common Criteria certification.
Trax99 has successfully completed all accreditation procedures with the ACN (National Cybersecurity Agency) for its structure and personnel working at the LAP (Accredited Testing Laboratory), which, in accordance with the new regulations, will be responsible for assessing the security of devices used in national critical infrastructures. The new LAP – Trax99 – has achieved accreditation for the "Software and Network" area at the "MEDIUM-HIGH" level.
In the CyberSecurity field, Trax99 can support customers with proprietary products and solutions on Offensive Security, IoT Cybersec, Siem, Risk Assessment Mapping, SIM 1&2 Compliance, Supply Chain Risk Evaluation, Anti-ramsomware, Training & Gamification, Awareness and Hardening.
Governance, Risk Management & Compliance service, which demonstrates DP's expertise in building metrics based on IT and OT standards and policies. In the Supply Chain and Third Party Risk Management area, Trax99 supports, manages, and analyzes information for the aggregation and correlation of supplier and third-party data for security posture assessment and continuous monitoring, cyber risk assessment for insurance policy underwriting, fraud prevention, and operational process support, typically provided in the form of consulting, analysis, and risk management.
Trax99 provides managed security monitoring and analysis services, implemented through tools for collecting and evaluating events occurring in clients' infrastructure to support the detection and response efforts of its cybersecurity experts, with particular attention to service design and onboarding. Trax99's managed security services provide significant value in several respects: real-time intelligence, improved threat analysis across relevant domains, efficient digital forensics and root cause analysis, unified and streamlined security incident and vulnerability management, and optimization of security resources.
Vulnerability Assessment (VA) and Penetration Test (PT) activities, possibly with a "Red Teaming" approach, with a methodology derived from the experience of the Trax99 Laboratories, therefore oriented towards reporting and the identification of recovery plans.
Expertise in defining the "DevSecOps" process and providing static and dynamic analysis services for open-source software and components according to the "Security by Design" philosophy. Trax99, through its own laboratories, monitors and identifies known vulnerabilities and performs protocol fuzzing to identify any unknown weaknesses and assess the risk (technological and legal) posed by the use of open-source software.
We offer our experience as integrators for the design and implementation of IT and OT network infrastructures in classified military environments and critical infrastructures, complete with all special systems (active and passive), to connect IT, ICS and SCADA systems, sensors, alarms, and video surveillance.
Supply of Fortinet, CISCO and other major brand network devices with installation and configuration support.
Join us in shaping the future with innovative solutions and expert advice.
Possiamo ideare, progettare, produrre, commercializzare prodotti, tecnologie e soluzioni per il comando ed il controllo delle infrastrutture critiche.