Services

Security audits that find real risks, not checkbox findings.

Five ways to test and strengthen your security, each run end to end by the same engineer: scoping, testing, report and retest.

Not sure which one you need? That is exactly what the free 30-minute call is for.

At a glance
Format
Remote, or on-site in France
Languages
English · French
Pricing
Fixed price, agreed upfront
Retest
Included
01 / Services

Pick the test that matches your risk

Each engagement has a fixed scope and price, agreed before anything starts.

Web application penetration testing

Your website, customer portal, SaaS or API attacked the way a real attacker would, with every finding proven and paired with a fix.

Web app pentest →

Network penetration testing

External exposure seen from the internet, and what an attacker could reach once inside your office or VPN.

Network pentest →

Cloud security audit

AWS, Azure, Google Cloud and Microsoft 365 configuration review: identities, exposed data, logging and the paths to an account takeover.

Cloud audit →

AI & LLM security audit

Chatbots, RAG assistants and AI agents tested for prompt injection, data leaks and unsafe actions, with EU AI Act readiness in mind.

AI security audit →

Security awareness training

Practical sessions for staff and developers: phishing reflexes, secure coding with the OWASP Top 10, on-site in France or remote.

Training →
02 / How it works

The same clear process on every engagement

You always know what is being tested, when, and what it costs.

  1. Free scoping call. 30 minutes to understand your context, your constraints and what worries you.
  2. Fixed-price proposal and NDA. A written scope, a timeline and a fixed price. The NDA is signed before I see anything.
  3. Testing and report. Findings ranked by risk, in plain language, each with a concrete fix. Readable by your CEO, usable by your developers.
  4. Debrief and retest. We walk through the results together, then I verify your fixes so you can show the risk is actually closed.
03 / FAQ

Common questions

Which service should I start with?

It depends on what you expose and what you store. A company with a customer portal usually starts with a web application pentest; a company running on Microsoft 365 or AWS often gets more from a cloud audit. The free scoping call is there to decide, and I will tell you if a full audit is not needed yet.

Will testing disrupt my production systems?

Tests are planned with you: agreed targets, time windows and contacts. Risky techniques are discussed before they are used, and testing can run on a staging environment when you have one.

How long does an engagement take?

It depends on the scope: a single web application is not the same as a full network. The proposal gives you the exact number of days and the delivery date before you commit.

What do I receive at the end?

A report with an executive summary and every finding ranked by risk, explained in plain language with a concrete fix, a debrief call, and a retest of your fixes.

Not sure where to start?

Tell me what you run and what worries you. I will recommend a scope that fits, or tell you if you do not need a full audit yet.