We test your web applications, systems and processes for vulnerabilities before someone else does. On site for companies in Tyrol, remote across the entire DACH region.
No obligation · Reply within 24 hours on business days · Free retest
As a software agency we have been building applications with Angular, Java and C# for years. That knowledge goes directly into our penetration tests and cyber security assessments. We understand the code behind the application, not just the scanner output. You get a personal contact in Innsbruck, measures you can implement without a dedicated security team, and reports free of jargon that you can also present to your cyber insurer, auditors or large customers. On request we test remotely across the entire DACH region, from Austria and Germany to Switzerland.
We test your web applications and APIs manually and with tools for vulnerabilities along the OWASP Top 10. Because we build software with Angular, Java and C# ourselves, we also catch flaws in the business logic that scanners miss.
We examine your publicly reachable systems such as mail servers, VPN gateways and firewalls from an attacker's point of view. You see which doors are open from the outside before someone exploits them.
A structured IT security audit for companies without a dedicated security team. We assess the current state of passwords, MFA, backups and network setup and prioritise the measures that reduce the most risk in your specific situation.
We send your team realistic but harmless phishing emails and evaluate anonymously how many react to them. The result is an honest baseline and a solid foundation for training, without exposing individual employees.
Austria's NISG 2026 takes effect on 1 October 2026 for medium-sized and larger companies in 18 sectors. We check whether your company is affected, compare your current state against the requirements and deliver a prioritised roadmap towards the registration deadline.
More on the NIS2 directive in our blogTogether we define what should be tested, which systems are in scope and what matters most to you. The call is free and without obligation.
Before anything happens, we put scope, test window and authorisations in writing. Without your approval, we do not test.
We test manually and with tools following OWASP methodology and score every finding with CVSS. Critical findings are reported immediately, not just in the final report.
You receive a management summary for executives, insurers and auditors plus technical details with prioritised remediation steps for your IT team.
We walk through the report together and answer all your questions. Fixed findings are retested free of charge so your evidence is complete.
In a free initial consultation we clarify scope, process and costs for your case together.
We test only with written authorisation and a clearly defined scope. Anything outside that scope is never touched.
On request we sign a non-disclosure agreement before we start. The report goes exclusively to you as the client and to no one else.
We work in line with the GDPR and delete test data and access credentials after the project ends. During testing we handle personal data as sparingly as possible.
Test times are agreed with you in advance so production operations are not put at risk. On request we test critical systems outside business hours.
Three typical packages from our portfolio, from a compact security check to a NIS2 package. Smaller engagements typically start in the low four-figure range. Every company starts from a different position, so we define the exact scope together in a free initial call and you receive a written offer with a fixed price.
Here you will find the most frequently asked questions and answers about penetration testing and cyber security.
Free of charge, no signup required.