An inventory of what you expose
Subdomains, published services, certificates, versions on show. An attacker starts here; so do we, and we keep it up to date.
[Product · Offensive testing]
We test your infrastructure the way an attacker would. Every month.
This is what the Guard plan adds: automated, AI-assisted tests reviewed by people, on everything your company exposes on the internet. Always with your written authorisation and within the scope we agree.
Coming soon: tell us about your case and we will tell you when and how
01 — What we do
Four things, every month
The tests
Automated and AI-assisted across the whole inventory, reviewed by a person before they reach you: no mass false positives, no tests outside the scope.
The in-depth credential study
Employees' passwords in breaches, info-stealer lists and past archives; whose account is compromised and what to do about it.
The report and the remediation plan
Every month, in plain language: what we tested, what we found, what to close first and what is already closed. Mapped to NIS2, GDPR and ENS for whoever asks you.
02 — The process
Four steps, no surprises
01
First conversation
You tell us about your company and we tell you, with no obligation, where we would start.
02
Scope and authorisation
We agree in writing what we look at, what we test and when, and you sign the authorisation. Without it, we touch nothing.
03
Monitoring and testing
Radar looks every day; the tests run every month. Findings land in your portal, ranked by risk.
04
Report and remediation
We help you close it, or close it ourselves if you ask. Your named contact replies within one working day.
The lines
The uncomfortable truths, up front.
We touch nothing without written authorisation. Every test has an agreed scope and window. What is outside the scope is not tested.
We are not a SOC. Nobody is watching screens at three in the morning. We watch every day and test every month; if you need 24-hour monitoring, we will tell you.
We do not replace your IT person. We work with them, or with your provider. We are what you lack, not what you already have.
The AI does not decide on its own. It proposes, and a person reviews before anything reaches you or is run against your systems.
Let's start by learning what an attacker sees of your company.
A conversation, the list of what you expose (we help you build it) and the signed authorisation. Nothing to install.