Security
We find out where your business is vulnerable, what actually matters, and what you should do first. You don't need to know anything about IT to work with us.
01 / Services
What we can help with
- Security testingWe try to break in, with your permission, and find the holes before criminals do.Penetration testing
- Risk and rulesWe work out what could go wrong, and help you follow the rules for personal data and security.GRC, NIS2, GDPR
- Secure cloud and emailWe review the settings in Microsoft 365, Google and other cloud services.M365, Azure, AWS
- Secure developmentWe check the code behind your website or app before anyone else does.Code review
- Training and phishing testsWe teach your staff to spot fake emails, and test it safely.Course and simulation
- Hire expertiseA security person for a project or a few days a month, without hiring.Hire
02 / Do I need this?
Do I need this?
If one or more of these sound familiar, it's worth a chat.
- You store information about customers or employees
- A large customer asks whether you've had a security test
- You use Microsoft 365, and nobody has reviewed the settings
- You've never thought about what happens if your systems stop
03 / Who we help
Who we help
- Small and medium-sized businessesWithout their own IT or security team, who want to know what to do first.
- Companies that sell softwareWho get security questions from bigger customers and need proper answers.
- Businesses that must show their workWhen customers, auditors or authorities ask for documentation.
04 / For IT managers
For IT managers
The frameworks we work to, so findings and fixes can be compared and verified.
05 / Glossary
Glossary
Words you may come across, explained in one sentence.
- Penetration test
- An agreed test where we try to break in, so the holes can be closed.
- Vulnerability
- A weakness in a system that someone can use to get in or cause harm.
- Risk assessment
- A review of what could go wrong, how likely it is, and what it would cost.
- GRC
- Umbrella term for governance, risk and compliance with rules.
- NIS2
- New EU security rules for important sectors, coming to Norway through the Digital Security Act.
- GDPR
- The privacy rules for how you collect, store and use information about people.
- MFA (two-step login)
- Signing in with a password plus an extra check, such as a code on your phone.
- Phishing
- Fake emails or messages that try to trick you into handing over passwords or money.
Free check of your email
Could someone send email that looks like it came from you? We check how your domain is configured. You get the answer by email within a few minutes when you use an address on the domain you want checked. We only use publicly available information.
Free, with no obligation. We won't call to sell you anything.
Questions you may have
- Will this be expensive?
- You get a written price before we start. No surprises.
- Are we too small?
- We mainly work with businesses that don't have their own IT department.
- Will it be technical and complicated?
- You get a one-page summary in plain English.
- Could you break something?
- We never test without a written agreement, and agree in advance what is safe.
Next step
Tell us what you need
Tell us briefly what you need. We reply within one business day with a suggestion for how to proceed.