Understand your exposure.
Inventory, initial audit, vulnerability scans and authorised penetration tests. Prioritise meaningful remediation.
Explore →01 / Cybersecurity
Identify weaknesses, protect your services and prepare for incidents. Pentesting, hardening and monitoring: build coverage around your servers, applications and teams.
An attempt approaches the perimeter.
Inventory, initial audit, vulnerability scans and authorised penetration tests. Prioritise meaningful remediation.
Explore →Linux and Windows hardening, patching, privileged access and Proxmox / VMware security. Controls that fit your stack.
Explore →Incident response, remediation reports and immutable backups. Responsibilities and commitments are scoped together.
Explore →PENTEST / AUDIT / RESPONSE
Focused engagements for each attack surface. Choose the assets to assess. Every engagement defines authorized systems, the testing window, exclusions and operational contacts.
Linux, Windows, exposed services and administration interfaces.
Network exposure · versions and configuration · authentication · privileges · segmentation
Authenticated flows, business applications, REST APIs and partner interfaces.
Access controls · sessions · input validation · business logic · data exposure
Internet perimeter, VPNs, VLANs, firewalls and inter-zone communications.
Reachable services · filtering · isolation · administration paths · traffic rules
Virtual machines, containers, Proxmox, VMware and cloud configuration.
IAM rights · secrets · storage exposure · workload isolation · backups
Privileged accounts, directories, remote access and authentication policies.
MFA · delegation · service accounts · permissions · access logging
Turn audit findings into corrected, verifiable configurations.
Patching · service reduction · admin access · secret management · retesting
Asset inventory, recurring checks and remediation tracking.
Severity · actual exposure · owner · deadline · remediation evidence
Prepare procedures, preserve useful evidence and organize recovery.
Triage · containment · analysis · restoration · lessons learned
Assets, authorization, access and rules of engagement.
Manual tests and technical checks tailored to the scope.
Executive summary, technical findings, severity and remediation plan.
Verify fixes and track residual risks.
Quoted engagement · No tests are launched from this page.
Explicit scope, actionable evidence and clear responsibilities. Selected deliverables are detailed in the proposal.
Identify assets, identities, exposed flows and owners. Define audit authorisations and required access.
Inventory + responsibility matrix
Review accessible configurations, logs and vulnerabilities. Prioritise by exposure, business criticality and remediation feasibility.
Evidence-backed findings + remediation plan
Plan changes with your teams, prepare rollback and verify fixes within authorised scope.
Action log + verification
Define detection cases, escalation paths and incident procedures. Review coverage as systems change.
Runbooks + coverage review
Third-party vendors, EDR/SIEM licences, log retention, coverage hours and response times are validated in the contract. No logo, tool or tier implies certification or exhaustive detection.
Adjust your configuration. Your budget follows instantly.
Architecture, availability, terms and commitments: your proposal brings together the information you need to decide.