Pentests and audits that tell you exactly what to fix and in what order.
Pentests, compliance audits (ISO 27001, NIS2, DORA), vulnerability assessments and security-officer support. Real threats, concrete fixes, a report that both the board and engineers understand.
Infrastructure data is protected by a confidentiality undertaking (NDA). You won’t see any prices in the survey. We prepare the quote individually.
Scope of services
Click a service to see what it covers and how it works. We prepare the quote after a short survey.
External pentest
A controlled attack on your internet-facing surface (servers, apps, VPN, mail) from an outside attacker’s perspective. We show what is realistically exploitable before someone else does.
More about the serviceInternal pentest (LAN/AD)
A simulation of an attacker already inside the network: a compromised laptop, a rogue insider. We test segmentation, Active Directory and privilege-escalation paths.
More about the serviceWeb application test
An in-depth OWASP-based test of your app and admin panel: business logic, authentication, authorization, injections, IDOR.
More about the serviceAPI test
Testing of REST and GraphQL interfaces: object-level authorization, excessive data exposure, rate limits, token handling.
More about the serviceMobile application test
iOS and Android: data storage, server communication, security-control bypasses, resistance to reverse engineering.
More about the serviceSecurity audit (ISO/NIS2/DORA)
A compliance and maturity assessment against ISO 27001, NIS2 and DORA, with a concrete gap list and remediation plan.
More about the serviceVulnerability assessment
A broad vulnerability scan of infrastructure and applications, manually verified and prioritized by real risk, with no flood of false positives.
More about the servicevCISO
An experienced security officer on a part-time basis: strategy, policies, implementation oversight and liaison with auditors and regulators.
More about the serviceHow it works
From inquiry to report: simple and with no commitment upfront.
You fill in a short scoping survey
We collect assets, quantities, technologies and locations: everything needed for a solid quote. Data is protected by an NDA.
We prepare an individual quote
Based on the scope we prepare a proposal with timeline and delivery approach. No hidden costs.
We deliver and hand over a report
After delivery you receive a report with vulnerabilities, priorities and concrete remediation steps.
Let’s start with the scope
Fill in the short scoping survey and we’ll prepare an individual quote for a test or audit.
Request a quote