Security
We review your site, application and infrastructure looking for what actually gets exploited: reused passwords, access that was left open, unpatched dependencies, default configurations nobody ever changed.
Who it is for
- Companies handling customer data that have never had a review.
- Teams that inherited a system and do not know what is inside it.
- Businesses whose large client asked them to demonstrate their security practices.
What it includes
-
Exposed surface review
What is published on the internet under your organization’s name, including servers and panels somebody spun up and nobody shut down.
-
Dependencies and patching
An inventory of libraries with known vulnerabilities, plus a plan to update them without breaking what works.
-
Access and credentials
Who has access to what, accounts belonging to people who left, and API keys stored where they should not be.
-
Configuration and backups
Encryption, certificates, file permissions, and backups that can genuinely be restored.
-
Prioritized report
Every finding with its real risk and the effort to fix it. No list of 200 automated warnings without context.
What we need from you
- 01 Written authorization to review the systems. Without it we touch nothing.
- 02 An inventory of domains, servers and services, even an incomplete one.
- 03 A technical contact who can explain why something is the way it is.
Frequently asked questions
Is this a penetration test?
It is a configuration and code review, which is what most companies need before paying for a pentest. If your case calls for a formal offensive test, we say so and point you to someone who runs them.
Do you fix what you find?
We can, or we can document it for your team. Often half the list closes in a day and is worth clearing right away.
How often should this be repeated?
Once a year for a site that changes rarely. Quarterly if you are shipping changes continuously.
Does this sound like your case?
Write to us with two or three lines about what you need. We answer with specific questions, not a catalog.