Services.
Assessment, pentesting and attack emulation, and recurring reviews answer different questions. The scope is agreed around your systems. Remediation remains a separate service.
Security Assessment
Reveal exposure. Prioritize risk and remediation.
Service scope
- Attack surface
An overview of your externally visible systems.
- DNS, TLS & email
Review configuration and email authentication.
- Web configuration
Assess issues in publicly reachable web services.
- Risks & actions
Understand which findings need attention first.
Outcome
An independent external assessment with a written report, documented findings and a prioritized action plan.
Pentesting & Attack Emulation
Prove exploitability. Examine attack paths and control effectiveness.
Service scope
- Applications & access
Assess who can access which data and functions.
- Infrastructure & cloud
Examine approved systems, identities and trust relationships.
- Exploitability
Test vulnerability signals under controlled conditions.
- Attack paths & controls
Understand how agreed controls respond to tests.
Outcome
A clear report on the agreed tests, with evidenced findings, open questions and prioritized actions. Assessed attack paths and control responses are documented with supporting evidence.
Security Monitoring
Identify emerging risk. Track changes and remediation.
Service scope
- Changes
Compare your external attack surface with its baseline.
- Configuration drift
Identify new or recurring issues following changes.
- Dark web & leaks
Review signals from agreed sources for origin and attribution.
- Emerging risks
Relate new vulnerability information to your known systems.
Outcome
A documented history of your attack surface, with relevant changes, current priorities and a traceable remediation status.
Cyberkern Fix
You can commission Cyberkern Fix separately after the assessment. Remediation and retesting are not automatically included in the assessment.
Service scopeImplement changes
We make changes only within the approved scope. We agree responsibilities, backup and rollback options with you beforehand.
Retest changes
We mark remediation as checked only after an appropriate, documented retest. We identify any findings that remain.
Contact
Scope and timing, agreed personally.