Security is a Process
not a
Product
not a
Product
© Luca Locatelli
Certifications
Researches
Supported By
Some of our numbers...
€0M+
Last 2 Years R&D Investments
€0.2M
2024 Incame
€0M+
Recurring revenue from XDR
0+
Zadig's Customers
0
International Patents
VS
Innovative defense strategies
Blue Team
Engineers and researchers devoted to the protection of cyber interests of our customers. Technical proficiency for planning, framework analysis and the most appropriate solution.
Blue Team
Attack techniques
Red Team
Qualified to break into IT systems and infrastructure by verifying the resilience of adopted defenses and researching possible vulnerabilities.
Red Team
bitCorp LegalTech
Strategic Business Partner that combines legal practice into customers’ digitization pathways.
Main Projects
bitCorp is a member of the CONSIS consortium, taking part in CONSIP competitive bidding processes.
Follow our official channel for all bitCorp's updates!
Partnership
Case studies 1
Cyber warfare
In a scenario of constant threat, various forms of cyberattacks are recorded. Many are carried out by amateur digital tinkerers, others by criminal organizations, and still others are true acts of hybrid warfare with clear strategic and economic objectives. It was precisely this second type of attack that struck a major multinational corporation. A group affiliated with a hostile intelligence service literally brought a strategic national company to its knees, halting production and threatening the integrity of its data and that of its valuable clients with a ransomware attack of rare destructiveness.
Cyber warfare
BITCORP established an operational command center involving the company’s extensive internal IT department, the ICT service provider for information systems, and the external SOC responsible for perimeter monitoring. The type of malicious agent used was immediately identified, and its structure made it possible to reconstruct the intrusion method. Thanks to our cryptography experts, the encryption keys were successfully recovered, and after a thorough cleanup and replacement of compromised peripherals, production was restored. Once the emergency was resolved, the client’s security posture was reinforced through the implementation of our Zadig XDR solution.
Case studies 2
Digital gangsters
The head of the secretariat for the President of a major private healthcare group fell victim to one of the most basic cyberattacks—yet one that could have severely damaged the entire group’s reputation. It was a case of digital identity theft, where the victim was deceived into voluntarily providing their own Cloud login credentials. No protections were in place (e.g., two-factor authentication), allowing the attacker to operate undisturbed until they linked the victim’s WhatsApp profile to another device, disabling access from the legitimate owner’s phone.
Digital gangsters
Thanks to our prompt intervention—and especially to the client’s quick request for help—we were able to recover the Cloud credentials, remove the unauthorized device, and reassign access to the rightful owner’s device, avoiding potentially disastrous consequences. After all, how many secrets can be compromised just by gaining access to a single smartphone?
Case studies 3
World of Spies
A major national organization active in research and innovation began to notice that one of its competitors consistently anticipated its results and inexplicably launched the same research initiatives. This raised serious concerns that the competitor might be engaged in industrial espionage.
World of Spies
Assigned to carry out the necessary investigations in the company’s ICT segment, no critical IT issues were found. However, it was not possible to rule out more traditional forms of espionage, such as printing sensitive projects for later exfiltration to third parties. A series of penetration tests revealed a lack of protection for both Endpoints and the Network. To defend that perimeter, our ZADIG XDR was implemented, which also made it possible to monitor the improper use of printing systems and data extraction in general.
Problems
The issues that Bitcorp solves coincide with two distinct landmark markets, called Institutional and Corporate. On the one hand, there is the need to provide State Security Institution with tools to maintain information supremacy against the main threats to the community and the ability to detect forensic information in the technology field.
On the other hand, there is a need to protect information and the knowhow of individuals and companies exposed to new cyber threats from classic ransomware to the far more insidious attacks from the inside. There is also provision for phishing prevention, opening and backdoor manipulation that can help inoculate the dreaded trojans and spyware.
In addition, the cyber-crime risk now threatens to sabotage strategic infrastructure as well as violating private domains and homes using the interconnectivity of the Internet Of Things (IoT) and thus threatening intellectual property.
On the other hand, there is a need to protect information and the knowhow of individuals and companies exposed to new cyber threats from classic ransomware to the far more insidious attacks from the inside. There is also provision for phishing prevention, opening and backdoor manipulation that can help inoculate the dreaded trojans and spyware.
In addition, the cyber-crime risk now threatens to sabotage strategic infrastructure as well as violating private domains and homes using the interconnectivity of the Internet Of Things (IoT) and thus threatening intellectual property.
Solutions
In both reference markets we provide ad hoc solutions for the specific customer through our hardware and software products and the ability to create tailor-made tools to your specific needs. We provide also all required skills, human resources and tools to understand the reality and related to individual threats.
If required, our engineers can provide training both on specific technical methodologies and on best practices useful for proactive corporate security. In the Institutional field, the most proposed solutions range from data traffic analysis to deciphering of the most widely used encryption systems, passing through the execution of real man in the middle attacks. In the Corporate field, however, we propose in-house solutions such as Intrusion Detection Systems (IDS) and Intrusion Detection & Prevention Systems (IDPS), which are based on the framework of ELK (Elastic, Logstash, Kibana) and Wazuh.
If required, our engineers can provide training both on specific technical methodologies and on best practices useful for proactive corporate security. In the Institutional field, the most proposed solutions range from data traffic analysis to deciphering of the most widely used encryption systems, passing through the execution of real man in the middle attacks. In the Corporate field, however, we propose in-house solutions such as Intrusion Detection Systems (IDS) and Intrusion Detection & Prevention Systems (IDPS), which are based on the framework of ELK (Elastic, Logstash, Kibana) and Wazuh.
bitCorp
CyberSecurity Creative Lab
CyberSecurity Creative Lab
BITCORP SRL
headquarters: Via Carlo Freguglia, 10 20122 Milano
P.IVA/C.F.: IT10273460963 | N. REA: MI-2521794
Share capital: € 200.000,00 i.v.
Transport Encrypted Protocol (TEP)
"La parte del progetto afferente la particolare metodologia di instradamento delle comunicazione mediate il protocollo TEP é stata finanziata con la misura "Brevetti +" con fondi dell’Unione Europea – NextGenerationEU"
CLP: BRE 0001323
CUP: C89J23000070008
"Progetto di valorizzazione del brevetto n. IT102020000014518"
Il brevetto nr IT102020000014518 ha inteso tutelare un’invenzione riguardante un metodo di comunicazione tra nodi di una rete di telecomunicazione capace di sfruttare un database a grafo per instradare le trasmissioni nell’ambito di una rete a nodi distribuiti. Questa particolare metodologia si inserisce nel più ampio progetto TEP, ovvero un protocollo di comunicazione, Telco e Dati, che applica il paradigma della blockchain alle telecomunicazioni.