03 — Identity & Service Protection
Protect everything that carries your company's name.
One fake e-mail in your name or a single hacked account can cost you customers, money and reputation. We protect the accounts, e-mail, website and services behind your company — so customers and partners can trust every message they receive from you.
For your business
What your company gains
Nobody can send e-mails or run fake profiles in your company's name.
Fewer incidents that stop operations, cost money or drive customers away.
Clear, practical steps for GDPR and NIS2, proportionate to the size of your company.
What we protect
Layered protection for identity and services
Accounts & access
MFA everywhere, conditional access, protected admin accounts, least-privilege roles and regular access reviews.
E-mail & domain
SPF, DKIM and DMARC so nobody can send e-mail in your name; domain lock, DNSSEC and certificate monitoring.
Impersonation monitoring
We watch for lookalike domains, phishing sites and fake social profiles using your brand — and help take them down.
Security testing
Penetration testing of web applications, APIs and infrastructure, and red-team exercises that show how a real attacker would get in.
Monitoring & response
Centralized logging, alerting on suspicious sign-ins and a clear incident response plan when something happens.
Compliance
Practical support for GDPR, NIS2 and ISO/IEC 27001 alignment: policies, records, risk assessments and staff awareness.
Security health check
Six questions every company should be able to answer.
Our health check answers them for you — with a short report and concrete next steps.
- Who has administrator access to our systems — and should they?
- Is multi-factor authentication enforced for every account?
- Can someone send e-mail that looks like it comes from us?
- When do our domains and certificates expire, and who renews them?
- Which lookalike domains and fake profiles use our name?
- Are our backups tested, and how fast can we recover?
FAQ
Questions about protection
What is DMARC and why does it matter?
DMARC is a standard that tells receiving mail servers how to handle e-mail that claims to come from your domain but fails authentication. Together with SPF and DKIM, it stops attackers from sending phishing e-mails in your name and improves the delivery of your legitimate e-mail.
Do you perform penetration testing?
Yes. We test web applications, APIs and infrastructure under a clearly agreed scope and rules of engagement, and deliver a report with prioritized findings and remediation guidance.
Can you help us with NIS2 and GDPR?
Yes. We help you understand which requirements apply, close the technical gaps, and prepare the policies and records you need — pragmatically and proportionate to your size.
Let's talk about your business goals.
Tell us where your company is today and where you want it to be. You'll get a clear, practical plan in plain language — with no obligation.