See every security flaw in your company. At no cost.
The analysis covers everything your company exposes to the internet, identifies each flaw, ranks it by severity and states the fix. Nothing to install, no commitment and no cost.
The analysis starts as soon as the domain is confirmed.
What the analysis delivers
The result is not a list of alerts without context. Each flaw appears with its severity, the evidence behind it and the matching fix.
- Admin panel reachable from the internetAnswers on port 8080, with no second authentication step.
- Corporate credential in a public breachThe same password is still valid on a service in use.
- Certificate expiring in nine daysRenewal is not automated.
- Server unpatched for fourteen monthsTwo known flaws have public exploit code.
Finding it is the simple part
The analysis shows the problem within hours. Fixing it, and keeping it fixed, is a different job: it takes people with different specialities, available when the incident happens.
One professional alone does not cover triage, investigation, response, engineering and forensics at once. A team does. That is why the operation is contracted as a team, not as a person.
Virtual Security Team
The roles of a security operations centre at your company disposal, under contract. Each speciality steps in when the work calls for it, with nobody for your company to hire, train or retain.
- Security analyst, tier 1
- Alert triage. Separates noise from what needs attention, within the agreed deadline.
- Security analyst, tier 2
- Investigates what clears triage. Reconstructs events and determines the scope.
- Security analyst, tier 3
- Complex cases and new threats. Runs threat hunting and tunes detections.
- Incident response analyst
- Containment, eradication and return to normal once an incident is confirmed.
- Security engineer
- Deploys and maintains defences, with hardening, tool integration and automation.
- Forensic analyst
- Evidence preservation and detailed reconstruction when the case calls for forensics.
Team composition and monthly hours are set in the contract, according to the size and criticality of the environment.
Virtual CISO
The leadership package, contracted separately. The Virtual CISO owns risk management, sets priorities, organises the team work and reports to the board in business language.
Monthly hours are fixed in the contract. It is the difference between having execution and also having someone answerable for strategy.
How it starts
- 1
Account creation
With a work email. Nothing is installed in your environment.
- 2
Domain confirmation
Ownership is verified inside the platform. Nothing is examined before that.
- 3
Results in the dashboard
Flaws appear as the analysis advances, with severity and evidence.
What is already included
Much of the market ends the engagement when the ticket closes and bills separately for what comes next. The items below are part of the scope.
- Root cause analysis
- Every closed incident records why it happened. Without that, the same fault returns under another name.
- Continuous maturity assessment
- The level is recalculated against the real environment, and progress is documented month by month.
- Process construction
- Missing procedures are written with the people who run them, not handed over finished.
- Training for your own staff
- The team that stays is trained to operate, which reduces vendor dependence.
- Automation of routine work
- Repetitive work runs on its own, and specialist hours go to what needs judgement.
- Complete scope
- No module billed separately and no price revision for each additional item.
The analysis is free. The operation is contracted.
The initial analysis carries no cost and the result stays available in the account. Continuous monitoring, with a permanent scan, internal network reach, leaked credentials and a detailed remediation plan, is a monthly subscription. The Virtual Security Team is contracted separately, with defined scope and hours.
US$ 300 a month, or R$ 1.500
The analysis requires no card and no commitment.