Web application penetration test
Following OWASP WSTG and ASVS: access control, authentication, injection and manual business-logic testing.
per application, up to 20 functions
Services
Services
Every service has a defined scope unit, methodology and deliverables. Pricing is given as a fixed amount in a written proposal once the scope is agreed.
Application security
Web, mobile and desktop applications, APIs and AI-based systems, tested with authenticated access for every role.
API penetration test (REST, GraphQL, SOAP)
OWASP API Security Top 10: object-level authorisation, mass assignment, rate limiting, excessive data exposure.
up to 30 endpoints
Mobile application penetration test
OWASP MASTG and MASVS: storage, communication, authentication, platform interaction. Android, iOS, Huawei HMS.
per platform
Thick client assessment
Desktop and terminal-server applications: traffic, local storage, DLL loading, direct database connections.
per application
AI and LLM application assessment
OWASP Top 10 for LLM: prompt injection, data leakage, permission boundaries, tool-call abuse.
per application
Secure code review
Static analysis tooling plus manual review of security-critical code.
per ~50,000 lines of code
Network, infrastructure and cloud
External and internal networks, Active Directory, wireless, workstations and cloud environments.
External network penetration test
Discovery, service and vulnerability validation; VPN, e-mail, admin interfaces, TLS. Verified findings instead of scanner output.
up to 16 public IP addresses
Internal network and Active Directory test
From an assumed-breach position: AD attack paths, ADCS, NTLM relay, privilege escalation, file shares. Includes a path-to-Domain-Admin diagram.
up to 100 hosts, one AD forest
Wi-Fi security test
WPA2/3-Enterprise configuration, guest network isolation, rogue access points.
per site
Cloud security assessment
Azure, Microsoft 365, AWS, GCP: identity and access, public resources, logging, privilege escalation paths.
per subscription or tenant
Workstation assessment
Lost-laptop scenario: disk encryption, local privilege escalation, USB devices, endpoint protection.
per image
802.1X/NAC and segmentation
From a wall port: network access control bypass, VLAN hopping, reachability between zones.
per site
IoT and hardware security
Device, firmware, communication and back end assessed together.
per device type
OT and industrial security
Industrial control systems assessed without disrupting production, following IEC 62443 and NIST SP 800-82.
OT security baseline assessment
Interviews, documentation and passive traffic analysis: asset inventory, protocol map, Purdue levels, IT/OT boundary, remote access.
per site
OT penetration test (active, controlled)
In a test environment or maintenance window, with written OT authorisation: engineering workstation, HMI, PLC access, OPC UA.
custom scope
OT segmentation design and validation
Zones and conduits, DMZ, secure remote maintenance, then verification that traffic really is blocked.
per site
People and physical security
Testing staff and physical controls against an agreed scenario, without naming individuals.
Phishing campaign
Agreed templates and target group; click and credential-submission rates in aggregate statistics.
per campaign
Voice phishing (vishing) test
Service desk and help desk processes tested against an agreed scenario.
per campaign
Physical intrusion test
Access control, tailgating, clean-desk policy, with separate legal preparation.
per site
Adversary simulation
Objective-based exercises that measure detection and response as well as prevention.
Red team exercise
A realistic attack chain using MITRE ATT&CK techniques towards an agreed objective, measuring detection and response.
per engagement
Purple teaming and detection testing
Running ATT&CK techniques together with the defenders; output: a detection coverage matrix.
per engagement
Threat modelling
STRIDE-based analysis to identify critical threats and defensive priorities.
per system
Advisory and compliance
NIS2, ISO/IEC 27001 and business continuity: assessment, policies and readiness.
NIS2 supplier quick assessment
Questionnaire, interview and a prioritised remediation plan on a 30-point maturity scale.
per organisation
Architecture review
Based on design documents and a threat model, before development or procurement.
per system
Cybersecurity maturity assessment
Assessment of the security programme with a prioritised improvement plan.
per organisation
Risk analysis and data asset inventory
Data inventory, security classification, threats and proportionate controls.
per organisation
Information security policy
Drafting or updating policies, procedures and supporting materials.
per organisation
ISO/IEC 27001 and NIS2 readiness
Gap analysis and audit preparation under Hungarian Act LXIX of 2024 and related decrees.
per organisation
Business continuity: BIA, BCP, DRP
Business impact analysis, continuity and recovery plans, followed by an exercise.
per organisation
Incident response plan
Checklist, roles, contacts and reporting obligations.
per organisation
Training and awareness
Practical training for staff, plant personnel, developers and executives.
Security awareness training
60–75 minutes with real cases and practical advice.
up to 20 people
OT security training for plant staff
2 × 45 minutes on site.
per session
NIS2 executive workshop
Two hours on management responsibilities and actions.
per session
Secure development training
One-day course for developers with OWASP Top 10 exercises.
up to 12 people
Continuous services
Subscription services on monthly or annual terms.
External attack surface monitoring
Weekly discovery of new subdomains, open ports, services and expiring certificates, with a monthly report. The extended tier adds manual verification of critical findings and a quarterly executive report.
Continuous penetration testing
A quarterly testing budget for new features and changes, including retests.
NIS2 follow-up
Quarterly checks, phishing simulation and an annual quick assessment.
Leaked credential monitoring
Monitoring for leaked credentials and company mentions, with alerts.
Domain and brand monitoring
Detection of look-alike domains and preparation of takedown requests.