Lead.
An attacker does not wait for you to notice a flaw on your own. Security is therefore not a one-off product but a continuous state: assess, test, fix, monitor — the cycle we run for our clients.
Vulnerability assessment and penetration testing.
A vulnerability assessment finds known weaknesses in your systems and makes them fixable, reducing the chance that a targeted or automated attack succeeds. A penetration test goes further: it validates the findings in practice and measures the damage an attacker could cause — so we know not only the flaw, but its real-world impact.
What we assess.
- Network — from outside and inside, open ports, exposed services, segmentation.
- Web applications — known application-level weaknesses, access and session handling.
- Operating systems and configuration — hardening checks on Windows and Linux servers, patching, permissions, encryption.
- Cloud and network configuration — firewall, VPN and access rules.
Depth, to fit the engagement.
Three levels are available: black-box (from an external attacker's view), gray-box (with partial inside knowledge) and white-box (with full system description and source code). We choose the right level with you, based on the system's sensitivity.
Security consultancy.
A test is only worth something if the fix follows. In our consultancy we turn the findings into a sequenced, budgetable remediation plan: policies, permissions, backup and recovery, and technical measures aligned with NIS2 expectations. We also tell you what you do not need.
How we work.
We work in our usual four steps — Observe → Analyze → Change → Apply — from assessment through to re-checking the fixes, under ISO 9001, documented operation.