Cybersecurity Services

Cybersecurity for systems that must stay protected

We combine round-the-clock SOC monitoring (service and response times as agreed in the contract), penetration testing and cloud, network and endpoint security with clear risk prioritization and traceable measures.

Request cybersecurity →
·SERVICE OVERVIEW

Find gaps, close them and keep watch around the clock

Seven services in three steps. Start where your organization stands today. Click a node in the circle above for details on each service.

AI-generated image: Security consultant analysing a network diagram on screenAI content

You do not know where you are vulnerable.

Find gaps

What you get

  • Findings ranked by urgency
  • Concrete steps to fix them
  • Report for IT and management
AI-generated image: Engineer connecting network cables in a server rackAI content

You know your gaps and want to close them.

Harden systems

  • Network security
  • Cloud security
  • Endpoint protection
  • Awareness training

What you get

  • Separate network zones and clean access rights
  • Protected, centrally managed devices
  • Staff who recognize phishing
AI-generated image: Two analysts in a security operations center in front of a video wallAI content

Nobody is watching at night or at weekends.

Watch around the clock

What you get

  • Alerts with recommended actions, not alert floods
  • Immediate response to real incidents
  • Documentation for NIS 2 and GDPR
·24/7 SOC MONITORING

From the first alert to the report, around the clock

People, endpoints, network, cloud and data report every event to our SOC. We detect it around the clock, assess it in context and respond along fixed escalation levels, traceable for audit and the board.

YOUR PROTECTION LAYERSPeopleEndpointNetworkCloudDataFalse alarm filtered01 DETECTSIEM and EDRcollect every event02 ASSESSIn contextevaluate, threat hunting03 CONTAINPlaybook or escalationdevice is isolated04 REPORTReport to youGDPR, NIS 2, ISO 27001SOC 24/7Documented YOUR PROTECTION LAYERSPeopleEndpointNetworkCloudDataFalse alarm filtered01 DETECTSIEM and EDRcollect every event02 ASSESSIn contextevaluate, threat hunting03 CONTAINPlaybook or escalationdevice is isolated04 REPORTReport to youGDPR, NIS 2, ISO 27001SOC 24/7Documented

SIEM Central collection point for all security events, depending on the customer environment on common SIEM platforms.

EDR Protection software on every endpoint that reports suspicious behavior.

SOAR Fixed, automated procedures (playbooks) for standard incidents. Critical situations escalate at once along fixed escalation levels.

24/7
Monitoring, response times as agreed in the contract
At night, at weekends and on public holidays too
ISO27001
Certified ISMS
Our information security management system is certified, cert. no. 26052601
72h
Notification deadline, GDPR Art. 33
A data breach must be reported without undue delay, where feasible within 72 hours of becoming aware. We supply the documentation for it
Request 24/7 monitoring →
·PENETRATION TESTING

Structured methodology, not a vulnerability scan

A structured process in five steps, from the first look from outside to an audit-ready report.

  1. 01

    Reconnaissance

    Make the target's services, versions and configurations visible

  2. 02

    Vulnerability analysis

    Find known gaps, misconfigurations and logic flaws

  3. 03

    Controlled exploitation

    Prove exploitability in a controlled way, without damage

  4. 04

    Path analysis

    How far an attacker gets from first access to critical systems

  5. 05

    Two-level report

    Technical findings plus a management summary with risk classification

Start: Outside viewResult: Audit-ready report
·WHERE PENTESTS ARE REQUIRED OR EXPECTED
NIS 2Essential and important entities need procedures to assess the effectiveness of their measures (Section 30(2) no. 6 BSIG). A pentest is the usual evidence
ISO/IEC 27001Certified ISMS: security testing in development and acceptance (Annex A 8.29), where included in the Statement of Applicability
Critical facilities · BSIOperators prove to the BSI every three years, by audit, inspection or certification, that their measures work (Section 39 BSIG)
DORACertain financial entities need threat-led testing (TLPT, Art. 26)
Request a pentest →

Questions about cybersecurity? Answers

What does a SOC do?

SOC stands for Security Operations Center, a control room for IT security. Endpoints, network, cloud and data report their events there. There they are assessed in context, false alarms are filtered out and incidents follow fixed escalation levels. Round-the-clock SOC monitoring, service and response times as per contract.

How does a penetration test differ from a vulnerability scan?

A scan lists known weaknesses automatically. A penetration test goes further: we demonstrate in a controlled way which weaknesses can be exploited and show how far an attacker would get from first access to critical systems. The result is a report with technical findings and a summary for management.

Does NIS 2 require a penetration test?

NIS 2 requires particularly important and important entities to have procedures for assessing the effectiveness of their measures (Section 30(2) no. 6 BSIG in Germany). A penetration test is the usual evidence for this.

What do SIEM, EDR and SOAR mean?

SIEM is the central collection point for all security events, depending on the customer environment on common SIEM platforms. EDR is protection software on every endpoint that reports suspicious behavior. SOAR means fixed, automated procedures for standard incidents. Critical situations escalate at once along fixed escalation levels. Round-the-clock SOC monitoring, service and response times as per contract.

Where do you start if your own weaknesses are unknown?

By finding the gaps, with a penetration test or with RedMentis. You receive findings sorted by urgency, concrete steps to fix them and a report for technical teams and management. Hardening the systems and round-the-clock monitoring follow after that.