Services

Security policy review

We assess whether an effective information security management process is in place within the organization. We assist in its implementation if it does not yet exist and conduct risk analysis related to IT processes. Our efforts support compliance with applicable regulations such as NIS2, GDPR, and ISO/IEC 27001.

Learn more about the service: information security and security policy.

Manual security testing

We simulate the actions of an experienced attacker to verify whether the implemented security measures are sufficient. We conduct tests of IT environments and network devices, as well as web applications and services. Our work follows the guidelines outlined in the OWASP Testing Guide, ensuring a comprehensive and reliable approach to security assessment.

Learn more about our services: IT environment penetration testing, web application penetration testing

Vulnerability scanning

We verify whether system and service configurations are secure, up-to-date, and aligned with industry best practices. Our work is based on recognized standards such as CIS Benchmarks, NIST, as well as requirements from ISO/IEC 27001, PCI DSS, and the NIS2 directive. We identify potential security gaps and risks arising from improper configurations and provide practical recommendations to eliminate them.

Learn more about the service: system and service configuration audit

Social engineering tests

We conduct controlled social engineering tests that involve attempting to persuade employees to disclose confidential information, such as passwords, company data, or physical access to the facility.

Learn more about the service: social engineering tests.