[ 01 ]
Testing and exposure
Web, API, external and internal infrastructure testing. Vulnerability scanning. An actionable report, not a 200-page PDF with no owner.
Information security consulting
360-degree security work: testing, policy, awareness, and an operating model that still holds after the report.
Threats to information are a business risk, not an IT topic. We run 360-degree security work: vulnerability testing, security policy, staff awareness, and the operating model (NIS 2, ISO 27001, vCISO) so it still holds after the report.
Engagements
Information security, end to end
[ 02 ]
Policy and ISMS
Security policy, risk, evidence, committees. ISO 27001, ISO 27701, NIS 2, DORA. The deliverable has to stand in front of an external auditor.
[ 03 ]
Awareness
Security awareness and simulated phishing, calibrated to your work. Before and after measurement. Not a yearly video nobody remembers.
[ 04 ]
Fractional leadership
vCISO: hours, deliverables, reporting. A CISO the board can call, without creating a full-time seat too early.
Why here
Advisory, engineering and licences
[ 01 ]
One account
The same firm that writes the policy can harden Microsoft 365, place a firewall, and quote the licences. Less overlap between three suppliers.
[ 02 ]
Belgium
Brussels office. Work in French, Dutch and English. Companies, non-profits, publishers, mid-market. Not a brochure site with no counterpart.
[ 03 ]
Commercial follow-through
If the report says EDR, SASE or firewall, the quote comes from Solutions. Not a hand-off to a distributor you have to brief from zero.