• ISMS Implementation - Full lifecycle implementation of Information Security Management Systems
• ISMS Audit - Comprehensive security audits and compliance assessments
• ISO Audits - ISO 27001/27002 certification support and gap analysis
• NIS2 (Cyfun) Audits - Network and Information Security directive compliance
• Risk Management - Risk assessments, treatment plans, and mitigation strategies

Sectors: Government, Transport

• OT Assessment - Security posture evaluation of industrial control systems
• OT Asset Inventorization - Complete asset discovery and documentation
• Vulnerability Scanning - Safe scanning methodologies for OT environments
• Acquisition Support - OT security due diligence for mergers and acquisitions

Sectors: Pharma, Food Industry, M&A Due Diligence

• Attack Surface Monitoring - Continuous external exposure detection and tracking
• Custom Tool Development - Built internal ASM platform with domain analysis, breach intelligence, metadata extraction, port scanning, and technology stack review
• Automation & OCR - Automated document retrieval and processing for large-scale analysis
• PII Breach Analysis - OCR extraction of personally identifiable information from ransomware breaches
• Automated Reporting - Comprehensive intelligence reports generated from multi-source data

Sectors: Municipalities, Government, Private Sector

• Cloud Audits - Comprehensive security reviews of cloud environments
• Cloud Benchmarking - CIS benchmark assessments and compliance verification
• Technical Reviews - Network architecture, IAM practices, application security
• Kubernetes Security - Container orchestration and cluster security assessments
• DevOps Security - CI/CD pipeline security and Infrastructure as Code review
• Intune Assessments - Endpoint management and mobile device security
• Contractual Review - Cloud service agreements and SLA analysis

Sectors: Government, Transport

• Phishing Campaigns - Custom-built campaigns using Evilginx and Gophish from scratch
• SIEM Implementation - Microsoft Sentinel deployment and configuration
• SOC Operations - Security Operations Center analyst and partner services
• SOAR Automation - Security orchestration and automated response workflows
• Threat Hunting - Proactive threat detection and investigation
• Threat Modeling - Risk identification and attack path analysis
• Forensics Analysis - Digital forensics for major ransomware incidents
• 24/7 Incident Response - On-call hotline for critical security incidents
• Remote Security Assessments - Comprehensive security acquisition reviews

• Web Application Pentesting - OWASP Top 10 vulnerability assessment and exploitation
• Infrastructure Pentesting - Network penetration testing and lateral movement
• Mobile Pentesting - iOS and Android application security testing
• Physical Intrusion - Social engineering and physical security assessments
• Purple Teaming - Collaborative Red/Blue team exercises for detection improvement