Audit and pentesting, SOC and incident response, fractional CISO, training. Four areas of expertise for your teams, with scope and deliverables agreed before every engagement.
01Offensive
Testing before a release or after a major change.
External, internal and Active Directory pentests, web, mobile and API testing, code review and cloud configuration audits. A report with evidence and a prioritised remediation plan.
What you take away
02Defensive
Alert triage and incident investigation.
Continuous monitoring, human triage of alerts, incident response, forensics and support through recovery.
What you take away
03Strategic
Risk analysis and security programme tracking.
Fractional or interim CISO, ISO 27001, NIS2, GDPR and HDS compliance, EBIOS RM risk analysis, business continuity and disaster recovery planning.
What you take away
04People
Technical workshops and crisis exercises.
Workshops, phishing campaigns, cyber crisis exercises and technical training for your IT teams.
What you take away
We agree the scope, rules of engagement and deliverables together before work begins.
Objectives, assets, access and constraints.
Testing and analysis within the agreed boundaries.
Findings, evidence and priorities, discussed with your teams.
Remediation actions and follow-up arrangements.
Our public discoveries show how we move from a hypothesis to evidence, and then to a fix.
Share your context and objectives. We will help define the scope of the engagement.
Scope an engagement