Cybersecurity Services.
From Finding to Fix.
Every service exists because Swiss SMEs need it. Not because we wanted to pad our portfolio.
Security Audits & Compliance
Regulatory pressure is rising: nDSG since September 2023, ISG reporting obligation since April 2025, NIS2 through the EU supply chain. We assess your IT security against these requirements and deliver an action plan that actually gets implemented in your organisation.
CHF 5,000-15,000
Price depends on scope and regulatory environment. Includes report, action plan and 90-day retest.
Example from a real engagement (anonymised)
Penetration Testing
Automated scanners find the obvious. We find the rest. Every engagement is manual-first: we map your application logic, identify trust boundaries and exploit them, the way a motivated attacker would.
CHF 4,500-15,000
Manual, per OWASP/PTES. Price depends on scope and complexity. Includes report, debriefing and retest.
CISO as a Service
Most SMEs with 50 to 250 employees don't need a full-time CISO, but someone to coordinate security strategy, board reporting and incident response. From two days per month.
CHF 2,500-5,000/month
From two days per month. Price depends on company size and scope. Monthly rolling contract.
CISO Assistant GRC platform (demo data)
SIEM & Cloud Security
Open-source SIEM on Swiss infrastructure. Your logs stay in the country, your alerts reach you directly. Full control over every layer, no vendor lock-in.
Wazuh SIEM: open-source, Swiss infrastructure (demo data)
Attack Simulations & Training
Most successful attacks start with people, not technology. We conduct realistic attack simulations that expose human vulnerabilities, and close the gaps through targeted training.
Methodology
Four Phases. Full Clarity.
Every engagement follows the same methodology. From scoping to retest.
01
Scope
Define the attack surface, capture compliance requirements, establish rules of engagement.
nDSG | NIS2 | ISG02
Test
Penetration tests, code audits, architecture reviews. Every finding manually verified and reproducibly documented.
OWASP | PTES | NIST03
Remediate
Prioritised report with reproduction steps, remediation guidance and architecture recommendations.
90-Day Retest04
Monitor
SIEM deployment on Swiss infrastructure. Continuous detection and automated alerting.
Swiss DCSovereign Platform
Sovereign Platform: Linux + Kubernetes
Security closes gaps. The biggest one only a platform of your own can close: your data, your logs, your infrastructure, in Switzerland, open source, cancel any time.
Cloud exit · Windows→Linux · Legacy→K8s
Discuss the platform →