Every audit starts with read-only mapping of servers, network, applications and databases. We change nothing until you have approved the results. Each finding is backed by concrete evidence and rated by severity. You get a technical report plus a management summary that non-technical readers can follow. For software projects, we also have our conclusions independently verified so no claim in the report goes unsupported. Typical problems we handle:
- analysis of a compromised website or server: entry point, scope, timeline – followed by a clean rebuild,
- abuse reports from providers and services that can be abused for DDoS amplification,
- blacklisted addresses and reputation recovery,
- firewall hardening and unified access (SSH keys, password management),
- data recovery from damaged disks and file systems. We work discreetly: we discuss findings with you and no one else. After the audit we can carry out the fixes ourselves or hand them to your supplier.