Peoria, Illinois

Penetration testing for Illinois organizations

Inject is based in Peoria and works with organizations across Illinois. Engagements are delivered through Brackish Security and scoped, tested, and reported by the same operator — an OSEP, OSWE, and OSCP holder with fourteen published CVEs.

What gets tested

External network
Everything reachable from the internet: VPN and remote access gateways, mail, exposed portals, and forgotten staging systems. Performed remotely.
Internal network and Active Directory
What an attacker reaches from one compromised workstation. Usually run through a small testing device shipped to your site or a virtual machine you stand up, so no travel is required.
Web applications and APIs
Authenticated, role-by-role testing of the business logic scanners miss: access control, tenant isolation, and workflow abuse.
Mobile and IoT
iOS and Android apps, their back-end APIs, and embedded devices. Several of the published CVEs below came from exactly this kind of target.

Why Illinois organizations test

Compliance and audits
PCI DSS (Requirement 11.4), SOC 2, and HIPAA risk analysis commonly call for independent penetration testing, and auditors expect a report written by the person who did the work.
Cyber insurance renewals
Carriers increasingly ask for evidence of recent external testing. A credible report written for underwriters makes renewal questionnaires easier to answer.
Illinois privacy law
Illinois has some of the most active privacy enforcement in the country. Organizations that collect biometric identifiers under BIPA, or personal information covered by the Personal Information Protection Act, have good reason to test the systems that store it.
Education, healthcare, and government
Practical experience spans school systems, medical organizations, and public institutions — the sectors that make up much of downstate Illinois.

Where we work

External, web, API, and mobile testing are performed remotely, and internal testing usually runs through a shipped device, so location is rarely a constraint. On-site work is available where physical access or wireless coverage is in scope. Engagements are taken statewide, including:

  • Peoria
  • Chicago
  • Springfield
  • Bloomington–Normal
  • Champaign–Urbana
  • Rockford
  • Decatur
  • Quad Cities
  • Naperville
  • Joliet

Scope a penetration test

Services, methodology, and scoping are on the Brackish Security site.