Services
Security expertise that fits your organisation
Five services that together cover the full security agenda, from certification and governance to engineering and AI. Pick what you need or let us coordinate the whole.
ISO 27001 audits
Ready for certification, without surprises.
We guide your organisation from baseline to certificate, using pre-audits, gap analyses and an ISMS that fits the daily work of your teams.
Outcome
Demonstrably in control, ready for certification.
What we do
- Gap analysis against ISO 27001:2022 (including Annex A)
- Design and implementation of the ISMS
- Internal audits and management review
- Support during the certification audit
(C)ISO as a Service
Security leadership on demand.
An experienced CISO or Information Security Officer, exactly as much as you need. We translate risks into board language, steer on measures and build a security culture that lasts.
Outcome
A grip on security without a full-time CISO on payroll.
What we do
- Strategy, roadmap and security governance
- Reporting to management and supervisors
- Leading security programmes and teams
- Flexible: from a few days a month to interim
Third Party Security Risk Management
Your chain is only as strong as its weakest supplier.
Suppliers and SaaS vendors are among the biggest risks. We set up a scalable TPRM process: from intake and assessment to ongoing monitoring and contractual security requirements.
Outcome
Supply chain risks made visible and manageable.
What we do
- Supplier classification and risk scoring
- Security assessments and due diligence
- Contract and data processing agreement requirements
- Continuous monitoring and reassessment
Application security
Secure software, from the first line of code.
We build security into your software delivery. From threat modelling and secure coding to code review, pentesting and a workable DevSecOps pipeline that does not slow developers down.
Outcome
Fewer vulnerabilities, faster and safer releases.
What we do
- Threat modelling and secure design reviews
- Secure SDLC and DevSecOps integration
- Code review, SAST/DAST and dependency scanning
- Pentesting and remediation support
AI Security
Innovate safely with AI.
AI and LLMs bring their own risks, such as prompt injection, data leakage, model abuse and governance questions. We help you use AI safely and responsibly, in line with the EU AI Act and the OWASP LLM framework.
Outcome
AI adoption with confidence and demonstrable control.
What we do
- AI risk assessments (OWASP Top 10 for LLMs)
- Governance around the EU AI Act and NIST AI RMF
- Securing RAG, agent and LLM applications
- Policy for responsible and safe use of AI
Ready to take the next step in your security?
Book a no-obligation introduction. We will think along about your biggest risks right away.