Pentagrid AG was founded in 2019 by Martin Schobert and Tobias Ospelt and is a boutique assessment and consulting company working in the information security sector. Before founding Pentagrid AG, Tobias and Martin worked both for a decade as IT security analysts for several customers, especially from the financial, medical, healthcare, and automotive sector.
Pentagrid is a neutral and independent security service provider. Neutral means we examine informations system and document what we see. We will not write reports tailored to support a product marketing. We feel strongly committed to a professional service with a focus on successful long-term relationships with our customers. As we believe transparency is important, we explain approaches, proposals and issues to our clients. We feel bound to confidentiality even without formal non-disclosure agreements. Furthermore, with our knowledge we feel responsible for the society and socities in foreign countries. Therefore, we will not participate in projects when we feel these to be incompatible with our values, which for example excludes projects for the military, the arms industry, and the intelligence apparatus.
Tobias started his professional life working for a bank before he studied IT and focused on IT security during his Master degree. Since a decade he is working as a technical IT security analyst in various customer projects. Tobias main interests are web application security, mobile app security, mobile device management security and fuzzing. He publishes tools and research in various fields of the IT security world and is the author of several Burp Suite extensions. He lectures information security for Bachelor students at Zurich University of Applied Sciences (ZHAW).
Martin started his commercial IT career twenty years ago as software developer and system administrator before focussing on information security. He studied computer science at the Humboldt University, Berlin. He has his interests beside web and mobile security in design reviews, source code audits, and reverse-engineering of software and protocols. Furthermore, he is interested in embedded devices and attacks on electronic components. Martin developed the software "degate" as part of his Diploma thesis that supports a semi-automated approach of reverse-engineering integrated circuits on the silicon level.