服务 / Cybersecurity and intelligence
Know where you are exposed before someone else finds out.
We assess, test and harden systems, networks and processes. When the risk justifies it, we add threat intelligence and open-source monitoring.
The problem
Most incidents do not start with a sophisticated technique. They start with a forgotten setting, a reused password or a supplier without controls. The work is to find those doors methodically and close them in order of importance.
What we do
Penetration testing
Networks, web and mobile applications, cloud and, when agreed, physical premises. A technical and executive report with a prioritised remediation plan.
Hardening
Critical servers and services configured against documented baselines that can be checked again.
Zero Trust architecture
Segmentation, identities and least-privilege access, so that one mistake does not open the whole network.
Threat intelligence
Tracking of threats relevant to your sector and of your exposure in open sources, with alerts someone can act on.
OSINT and due diligence
Open-source research on third parties, partners and suppliers, always within the law.
Incident response
Plans and exercises before the incident; containment, analysis and coordination when it happens.
How we work
Scope
Written authorisation and rules of engagement.
Test
Controlled, logged execution.
Report
Findings by priority, in technical and executive language.
Verify
We retest what was fixed.
- Who it is for
- Organisations with sensitive information, infrastructure operators, government and the financial sector.
- Possible deliverables
- Executive and technical findings report
- Remediation plan with owners
- Configuration baselines
- Third-party risk matrix
- Response plan and exercise log
- Limits and conditions
- Every penetration test requires written authorisation from the owner of the systems and a signed scope.
- We do not carry out activities outside the law or against third parties who have not authorised them.
- No assessment guarantees that there are no vulnerabilities: it reduces risk and documents the state on a given date.
Would you like to know how your organisation looks from the outside?
Give us the context in two or three lines. Technical details come once a confidentiality agreement is in place.