Occasions

When a pentest
comes due.

01
Before a release
Permissions, prices or a workflow changed. Test while the mistakes are still cheap.
02
When someone wants evidence
An audit, a customer questionnaire, a supervisor. The report follows BSI structure.
03
Between annual engagements
A manual pentest comes once a year. Everything changes in between.
04
After a fix
Walk the same path again and see whether it is really closed.
Sectors

Where it hurts
most.

01
Banking & finance
DORA, payment flows, account takeover.
02
Healthcare
Patient data is what attackers are after.
03
Public sector
BSI requirements, critical infrastructure, data sovereignty.
04
Mid-market & SaaS
Networks that grew over time, and platforms where one customer must never see another.
Without the cloud

Why this runs
without the cloud.

Request

Does it fit your
environment?

Describe briefly what is coming up — I will tell you honestly whether it fits.

// Request a pentest