SEC-01
Assess & test
Security audits
External and internal pentests
Web, mobile, cloud, and social engineering
ISO 27001 and NIS2 Article 21 checks
Cybersecurity & Penetration Testing
Find the vulnerabilities before attackers do, then close them. Security audits, manual penetration testing, hardening, monitoring, and incident response for regulated environments.
fpd-sec ~ demo-scope · scan · alert
SCAN
synthetic demo data
ALERTS
CVE-2024-6387·OpenSSH RCEPATCHED
CVE-2024-3094·xz backdoorPATCHED
CVE-2025-0411·7-Zip MOTW bypassVERIFY
CVE-2025-8088·WinRAR archive exploitMONITOR
CVE-2025-66478·Next.js React2ShellPATCH CHECK
HOSTS SCANNED
12
OPEN PORTS
14
CVSS MAX
7.2
// request surface
Clear security work packages, not a pile of acronyms.
Customers should know what they can ask for. We group the work into assessment, architecture, and operations, then connect the outputs so reports become implemented controls.
SEC-02
Architect & harden
Zero Trust access design
Cloud and Microsoft 365 hardening
Network segmentation
HSM-backed encryption and key rotation
SEC-03
Detect & respond
SIEM and SOC tuning
Threat detection use cases
Incident response runbooks
IR retainer and post-incident remediation
// pentest method
Manual testing with proof, fixes, and a re-test.
Automated scanners are useful. They are not a methodology. Our pentests combine coverage tooling with manual exploitation, OWASP-based checks, business-impact validation, and remediation support.
01
Scope
Define systems, rules of engagement, test windows, and escalation contacts.
02
Test
Manual verification across OWASP, auth flows, business logic, cloud posture, and exposed services.
03
Report
Proof-of-concept, severity, business impact, exploit path, and practical remediation guidance.
04
Re-test
Validate fixes after remediation and close the loop with a clean evidence trail.
// detection examples
Detection that sounds like operations, because it is.
Unusual login activity
Off-hours access
Privilege escalation
Suspicious data access
Unusual login activity
Impossible travel, new device patterns, suspicious authentication failures.
Off-hours access
Access to sensitive records outside normal working windows.
Privilege escalation
Unexpected admin role changes, service account abuse, policy drift.
Suspicious data access
Volume spikes, abnormal exports, sensitive table access, unusual download patterns.
// proof point
Sensitive environments need evidence, not adjectives.
For SOS-Kinderdörfer weltweit, the public reference is Microsoft infrastructure and endpoint autonomy, with regular penetration testing as the assurance layer around the operating model.
The endpoint platform, security baseline, and test concept create reviewable evidence without pretending a case study is a magic shield.
Read the SOS case study200
Windows endpoints in Intune scope
72%
test coverage as of 06/2026
25
managed application packages
Fixed-scope assessment
Security audit or penetration test with defined deliverables.
Implementation programme
Design, build, and deploy the recommended security architecture.
Managed service
Ongoing SOC, IR retainer, and continuous compliance monitoring.
ISO + Cybersecurity
Implementation and certification under one programme with our ISO practice.