Know where your systems are exposed and what to fix first.
LogSat Software LLC provides penetration testing, security audits and application security assessments for businesses, software teams and public-sector organizations. Every engagement is personally delivered by Roberto Franceschetti, LogSat's founder and principal consultant.
Work directly with an experienced security architect, penetration tester, vulnerability researcher and software developer throughout your assessment.
Security services
Network and infrastructure penetration testing
Assess internet-facing and internal systems for weaknesses that could expose data, allow unauthorized access or enable an attacker to move between systems. Testing can cover servers, exposed services, remote access, authentication and network security boundaries.
Scope can range from a focused assessment of selected systems to a broader infrastructure engagement.
Web application and API security assessments
Examine how applications handle authentication, authorization, sessions, user roles, sensitive data and business logic. Assessments combine manual testing with supporting tools to investigate weaknesses and explain their practical impact.
Suitable for internally developed applications, customer portals, APIs and applications preparing for a significant release.
Security audits and architecture reviews
Review the design and configuration of security controls across identity, networks, applications and infrastructure. Areas can include Active Directory and LDAP, Okta and multifactor authentication, certificates and PKI, firewalls, VPNs, logging, endpoint protection and email security.
Get a technical assessment of control gaps and recommendations that account for how your environment operates.
Hosted application and vendor security reviews
Assess hosted applications used by your organization within the agreed and authorized scope. Reviews can examine application access, identity integrations, administrative settings, data exposure and the security boundaries between your organization and its service providers.
Useful when evaluating a business-critical application, reviewing an existing deployment or following up on security concerns.
Your consultant
Roberto Franceschetti
Founder and principal consultant, LogSat Software LLC
Roberto brings more than 28 years of experience across enterprise security and software development, including extensive work in local government, public-sector and regulated environments. His background spans security architecture, penetration testing, security audits, incident response, identity systems and the operational realities of maintaining production infrastructure.
Roberto has discovered and responsibly disclosed security vulnerabilities in Microsoft Windows, Outlook and IIS, Box, Okta, Sophos and HP ArcSight. He also holds a U.S. patent for QR-code-based communication with air-gapped systems, reflecting his experience in both security research and technology development.
Roberto is also the creator and developer of SpamFilter ISP, LogSat's email-security product, which has served organizations since 2002. You work directly with the person performing the assessment and explaining the findings.
GIAC certifications
Roberto has earned the following GIAC certifications:
- GXPN - GIAC Exploit Researcher and Advanced Penetration Tester
View GXPN credential - GPEN - GIAC Penetration Tester
View GPEN credential - GWAPT - GIAC Web Application Penetration Tester
View GWAPT credential
How an assessment works
- Define the scope
Agree on the systems and applications to assess, business priorities, access requirements, testing windows and authorization. - Perform the assessment
Carry out the agreed testing and review, investigate potential findings and document the evidence needed to understand their impact. - Explain the results
Review the findings, their severity and practical remediation options with the people responsible for the affected systems. - Plan the next steps
Prioritize fixes and agree on any follow-up consulting or retesting required. Deliverables and follow-up work are defined in the proposal.
Reporting you can act on
Depending on the agreed scope, your assessment can include:
- An executive summary explaining the principal risks and priorities.
- Technical findings with affected systems, supporting evidence and reproduction details where appropriate.
- Practical remediation recommendations for administrators and developers.
- A review of the results with the people who need to act on them.
Engagements are tailored to the systems involved, the depth of testing and the reporting you need. Scope, authorization and deliverables are agreed before testing begins.
Discuss your next security assessment
Tell Roberto what you want assessed, the approximate number of systems or applications, and your preferred timeframe. He will work with you to define an appropriate scope and proposal.