Security Assessment · starting point

Do you really know how exposed you are?

In 2–3 weeks we give you an honest picture of your exposure and a 90-day roadmap with concrete priorities. Not a 200-page PDF nobody reads.

Passive and non-invasive: we do not touch your production.

• External attack surfaceWhat an attacker sees from the Internet: services, ports, certificates, known vulnerable versions.
• Dark-web exposureCompany credentials, emails and data already leaked and for sale in criminal circuits.
• Identity and accessMFA, password policies, VPN, privileged and administrative accounts.
• Perimeter and networkFirewall, segmentation, exposed services, forgotten permissive rules.
• Endpoints and backupsEndpoint protection and — above all — whether your backups can really be restored.
• Email securitySpoofing and phishing: the state of SPF, DKIM and DMARC on your domain.

Three phases, fixed timing.

• A report readable at two levelsA summary for decision-makers, technical detail for those doing the work — HLD quality, not a tool export.
• Risks ranked by priorityImpact × likelihood, so you know where to start and what can wait.
• A 90-day operational roadmapConcrete actions with estimates — not “adopt a zero-trust posture”, but what to do on Monday morning.
• A walkthrough sessionAn hour together to really understand the results, not a file left in your inbox.

Fixed price, agreed upfront. No surprises at the end.

Larger organisations or specific needs (multi-site, compliance, OT): tailored quote, same fixed-price logic.

Not a licence reseller: someone who has built and run the whole defensive chain — SOC, WAF, threat intelligence, identity — not just installed other people's products.