Real-World Offensive Security · Specialists in Attacks No SIEM Will Ever Catch

Think like an Attacker,
Act as a Partner

Penetration Testing & Red Teaming for Companies Worldwide

Request a free consultation now

Your organisation has vulnerabilities you don't know about. Attackers will find them anyway, whether through technology, deception, or the unlocked door to your server room. We find them first: with tailored penetration tests, clear recommendations, and a focus on physical pentesting, social engineering & OT/ICS.

NIS2 support Clear final report Free initial consultation
Request a free consultation now View services
Red Team Simulation
Auto-advancing...
Physical Social Eng. Infrastructure Active Directory Report
Outside Reception Office Conference Corridor IT Office Finance Server Room Network Explore Red Teaming →
Ready
0 / 5
NIS2 support · BSI baseline-oriented · Available internationally · Remote & on-site
Economic damage
289 bn €
Cybercrime costs Germany more each year than the entire automotive industry generates in revenue.
Bitkom Wirtschaftsschutz 2025
Affected companies
87 %
of German companies were victims of data theft, sabotage, or industrial espionage in the past twelve months.
Bitkom Wirtschaftsschutz 2025
The human factor
68 %
of confirmed data breaches involve the human element, according to Verizon — whether through error or social engineering. Technology alone is not enough: people remain the decisive attack surface.
Verizon DBIR 2024
Ransom payments
0,8 bn €
was paid to ransomware groups worldwide in 2024 according to the latest estimates — a decline from 2023's record year. At the same time, the number of attacks hit a new all-time high: prevention remains cheaper than ransom.
Chainalysis Crypto Crime Report 2025
Proven Expertise

Certified for the real thing

Before we attack your systems, we proved we could: our pentesters hold recognized offensive security certifications like OSCP, CRTO, and CRTP - hands-on exams that demand real hacking skill, not multiple-choice knowledge.

OSCP CRTO CRTP CESE CRTeamerX C-AgAIPen
Why Access Granted

What sets us apart from other pentest providers

100 % pentesting. No system-integrator business.

We sell no firewalls, no licences, no managed services. Whoever finds vulnerabilities and sells the fix at the same time has a conflict of interest. We do not – our findings are independent.

Specialised in physical, social engineering and OT

Many test networks and web apps. Our focus is where few look: at the factory gate, the reception desk, your employees' inboxes and your production control systems.

Physical Social Engineering OT / ICS

Individual instead of one-size-fits-all

No catalogue package, no flat rate per IP. Scope, approach and offer are derived from your infrastructure, your threat profile and your budget – and nothing else.

On-site when it makes sense

Even a classic infrastructure or Active Directory pentest can take place at your premises: short paths to your IT, questions answered in conversation rather than by ticket – across the DACH region and Europe.

Client portal instead of email ping-pong

Offer, findings, questions, files, report: everything in one portal you use from day one. Critical findings appear as soon as we record them.

All portal features

A certificate anyone can verify

After every pentest you receive a certificate with a reference code. Insurers, customers and auditors verify its authenticity online – without asking you.

Verify a certificate
Florian Schüssler
The person behind it

A founder who knows the other side

Florian Schüssler reconstructed real attacks as a cybercrime investigator with the criminal police before simulating them himself as a penetration tester and red teamer. Today he teaches IT security at DHBW – and still tests at Access Granted himself. You talk to the person who runs the test.

Former criminal police investigator Red teamer Lecturer at DHBW
Background & team

Free initial consultation

Ready to find out how secure you really are?

In 30 minutes we discuss your scope, answer open questions and you receive a first proposal – no obligation, no cost.

Book an appointment now hello@access-granted.de
Customer Reviews

What our customers say

★★★★★
(Translated from German) Our collaboration with Florian Schüssler has been exceptionally professional and trustworthy from the very beginning. He has repeatedly carried out extensive penetration tests for Kreiskliniken Reutlingen, identifying not only technical vulnerabilities but also communicating them clearly, comprehensibly, and in a practice-oriented way.
I'd particularly like to highlight his ability to see security as more than just an audit assignment. Florian was available to us as a competent point of contact at all times, answered questions quickly and thoroughly, and supported us in prioritizing and implementing appropriate measures. His recommendations are consistently pragmatic, solution-oriented, and tailored to our organization's specific needs. Especially in a hospital environment, where information security and availability are equally critical, this combination of technical excellence, reliability, and collaborative advisory support is invaluable.
We can recommend Florian Schüssler and AccessGranted without reservation and look forward to continuing our collaboration.
BG
Bert Gross
Head of IT & Medical Technology, Kreiskliniken Reutlingen

More references and project examples available on request.

Request a reference
Free & in 5 minutes

How secure is your domain, really?

Our automated Quick Check reviews subdomains, email security, exposed services, certificates, and typosquatting - in minutes, no obligation.

No sign-up required Result in ~5 minutes Built by real pentesters
Check for free now
FAQ

Frequently Asked Questions about Penetration Testing

Costs depend on the scope, complexity of your systems, and chosen test depth. After a free initial consultation you receive a transparent fixed-price offer – no hidden costs. For guidance: a web app pentest typically starts from €2,500, a full physical assessment from €3,500. For combined scope packages (e.g. infrastructure + AD + social engineering) we create individual offers – often cheaper than booking separately.
Depending on the module and scope, the actual testing takes between one and five working days. We communicate critical findings during the test – you are never in the dark. You receive the full final report within five working days of test completion. The entire process from initial consultation to final presentation typically takes two to four weeks. Accelerated timelines are available on request.
Yes. The NIS2 directive requires affected organisations to regularly review their security measures – penetration tests are a central and authority-recognised instrument for this. Our structured, risk-prioritised reports provide the evidence you need for internal and external audits, and help map findings to the NIS2 requirements catalogue.
Absolutely. Before testing begins, we jointly define clear scope boundaries, exclusion zones, and no-go systems. Every activity is fully logged. If unexpected impacts occur, we stop immediately and notify your contact in real time. In well over 99% of all tests there were no operational disruptions whatsoever.
A vulnerability scan is an automated tool that identifies known weaknesses from signatures. A penetration test goes much further: our experts think and act like real attackers, chain multiple vulnerabilities together, and test business logic as well as physical access. The result is a realistic picture of your actual security posture, not a generated CVE report.
Yes. We conduct pentests remotely and on-site across Europe. Remote tests (web app, infrastructure, AD) are location-independent. For physical assessments and social engineering we travel to your site – including outside Germany. Simply let us know your location and we will find a solution.

Book an appointment directly

30 minutes, free & no obligation.

Leave a message

We respond within 24 hours.

Direct by email

hello@access-granted.de

No automated replies. Your enquiry goes directly to the team.

Contact

Address
Albert-Einstein-Straße 1, 95028 Hof
E-Mail
hello@access-granted.de
Phone
+49 9281 5918506

AccessGranted X GmbH · HRB 7266 · Hof (Saale)

Company

Services

Compliance

Industries

© AccessGranted X GmbH