Security audit
We review the whole environment: network architecture and segmentation, the configuration of servers, network devices and cloud services, access rights, passwords, backups and patching. We compare them with best practice and the requirements of ISO/IEC 27001 and deliver a report with clearly prioritised recommendations — what to do now and what can wait.
Penetration testing
We attack your systems in a controlled way, as an attacker would — within an agreed scope, timeframe and rules of engagement.
- External test — everything visible from the internet: firewalls, VPN, mail and web servers
- Internal test — what an employee or a guest connected to your network could achieve
- Web applications — authentication, authorisation, input handling, sessions
- Wireless networks — encryption, guest access, rogue access points
Every vulnerability found is scored with CVSS v3.1, with steps to reproduce it and how to fix it. Once it is fixed, we test again.
Firewalls and perimeter security
We design, supply, implement and support Barracuda, Fortinet and Cisco firewalls — from the small office to multi-site organisations.
- Access policies and network segmentation
- VPN for remote staff and between sites
- Intrusion prevention (IPS) and content filtering
- Redundant internet connections
- Monitoring, logging and updates
- Migration from end-of-life devices
Team
Our specialists are trained as ISO/IEC 27001 internal auditors and have completed FIRST's course on CVSS v3.1 vulnerability scoring. We work to an ISO 9001:2015 certified quality management system.