// SERVICES
Find. Watch.
Stop.
From understanding your situation to operation and organization building. Six services, combined as your stage requires.
AG-01 / ASSESS
Assessment
See your exposure through an attacker’s eyes.
The first thing an attacker does is collect whatever is visible from the internet. We take the same viewpoint, surfacing exposed domains, servers, cloud settings, and staff information, and show what could become an entry point, in priority order.
TERM > One-off / 2 to 4 weeks
SCOPE
Scope
- External asset inventory (ASM)
- Web and network vulnerability assessment
- Cloud configuration audit
- Risk report and improvement plan
FOR
Who it is for
- ▸You do not have an accurate view of your public assets
- ▸A business partner has asked you to undergo a security assessment
- ▸You have never had a third-party assessment
OUTPUT
Deliverables
- ■Asset list and exposure map
- ■Severity and reproduction steps per vulnerability
- ■Executive summary
- ■Prioritized improvement roadmap
PROCESS
How we work
- 01Agree on scope and permissions in writing
- 02Information gathering and automated scanning
- 03Expert verification
- 04Debrief and improvement discussion
AG-02 / WATCH
Monitoring
Never miss a change or a sign.
Assets and cloud settings change daily, and new vulnerabilities are published every day. We monitor the changes a single assessment cannot capture and notify you, highest risk first.
TERM > Ongoing / monthly report
SCOPE
Scope
- Continuous attack surface scanning
- Monitoring of leaked data and lookalike domains
- Anomaly detection through log correlation
- Alerts by severity
FOR
Who it is for
- ▸You want to keep the state reached after an assessment
- ▸Nobody watches nights and holidays
- ▸Lookalike domains or data leaks concern you
OUTPUT
Deliverables
- ■Real-time notifications by severity
- ■Monthly status report
- ■Shared dashboard
- ■Quarterly review
PROCESS
How we work
- 01Design monitoring targets and alert rules
- 02Set up sensors and integrations
- 03Trial run and false-positive tuning
- 04Full operation and regular reporting
AG-03 / RESPOND
Response
How fast you start decides how much it costs.
The decisions made in the first few hours of an incident change how much damage follows. We support first response, containment, investigation of cause and impact, recovery, and recurrence prevention. Automated response is introduced gradually, starting with approval-based actions.
TERM > Scope defined in the contract
SCOPE
Scope
- Initial incident response support
- Containment and impact investigation
- Recovery and recurrence prevention
- Gradual automation, starting with approval-based actions
FOR
Who it is for
- ▸Contacts and procedures for incidents are not defined
- ▸You have nobody in-house who can investigate and respond
- ▸You want automation but fear business disruption
OUTPUT
Deliverables
- ■First-response playbook
- ■Investigation report (cause, impact, timeline)
- ■Recurrence prevention proposal
- ■Automated response rule design
PROCESS
How we work
- 01Agree on scope and contact structure in advance
- 02First-response support when an alert or call comes in
- 03Containment and investigation
- 04Recovery and review
AG-04 / SIMULATE
Simulation
Find the weak points before attackers do.
We reproduce the methods real attackers use, especially AI-assisted ones, within an authorized scope. Beyond technical entry paths, we test weaknesses in people and business processes.
TERM > Only within the agreed written scope
SCOPE
Scope
- AI-assisted attack scenario reproduction
- Penetration testing
- AI-generated phishing exercises
- Deepfake response drills
FOR
Who it is for
- ▸You want to confirm your defenses actually work
- ▸You worry whether staff can spot the latest scams
- ▸Some processes send money or data on an executive’s say-so
OUTPUT
Deliverables
- ■Report on scenarios and results
- ■Exercise result analysis by department and trend
- ■Improvement proposals and a retraining plan
PROCESS
How we work
- 01Agree on scenarios, scope, and prohibited actions in writing
- 02Execution
- 03Analysis of results
- 04Debrief and education
AG-05 / AI-GUARD
AI Security
Do not let the AI you deploy become an entry point.
AI chatbots and AI agents are useful, but they bring new risks: injected instructions, leakage of confidential data, and mistakes caused by excessive permissions. We evaluate both design and implementation.
TERM > One-off / ongoing
SCOPE
Scope
- Assessment of LLM apps and AI agents
- Prompt injection resistance testing
- Design review of permissions and data connections
- AI usage guideline development
FOR
Who it is for
- ▸You offer an AI chatbot internally or externally
- ▸You give AI agents permission to operate internal systems
- ▸Rules for staff use of generative AI are vague
OUTPUT
Deliverables
- ■AI application vulnerability assessment report
- ■Improvement proposals for permissions and data connections
- ■AI usage guidelines
- ■Input and output monitoring design
PROCESS
How we work
- 01Interview on architecture and use cases
- 02Threat identification
- 03Evaluation through attack scenarios
- 04Report and improvement support
AG-06 / ADVISE
Advisory
Build an organization that stays protected by design.
Technical measures alone do not protect an organization. We work alongside you on a system that keeps protecting: policy, rules, roles, education, and explanations to business partners.
TERM > Ongoing / monthly meeting
SCOPE
Scope
- Security policy and rules development
- Support for certifications such as ISMS
- Responding to security requests from business partners
- Training for executives and staff
FOR
Who it is for
- ▸Nobody is responsible for security
- ▸You are working toward a certification such as ISMS
- ▸You struggle to answer partners’ security questionnaires
OUTPUT
Deliverables
- ■Security policy and rules
- ■Organization chart and role assignment
- ■Training materials and delivery
- ■Support for questionnaire responses
PROCESS
How we work
- 01Interview on current state and goals
- 02Gap analysis
- 03Roadmap planning
- 04Regular meetings alongside you
// HOW IT CONNECTS
The services connect in a single defense loop
| SERVICE | OBSERVE | ANALYZE | PREDICT | RESPOND | LEARN |
|---|---|---|---|---|---|
| ASSESS | ● | ● | ● | · | · |
| WATCH | ● | ● | · | · | ● |
| RESPOND | · | ● | · | ● | ● |
| SIMULATE | · | · | ● | · | ● |
| AI-GUARD | ● | ● | ● | ● | · |
| ADVISE | · | · | ● | · | ● |
Not sure where to start? That is fine.
We will listen to your situation and sort out together what to tackle first.