Methodologies
OWASP WSTG and ASVS for web applications, CIS Benchmarks for servers and network equipment, NIST CSF for process assessment, PTES as the overall testing framework.
Report format
Executive summary, findings scored with CVSS 3.1 / 4.0, evidence, reproduction steps, prioritised recommendations, retest results.
Networks and equipment
Configuration review of network equipment from any vendor (MikroTik, Cisco, Ubiquiti and others) against CIS Benchmarks: segmentation, firewall rules, remote access, Wi-Fi.
OSINT
Only about the client themselves: their company and them personally. Passive collection from open sources under contract. Recommendations aligned with GDPR, Ukraine’s personal data law, NIST CSF and ISO/IEC 27001. Data is stored encrypted and deleted when the work is complete.
Sample report
An anonymised sample report is available on request.