NIS2 Security Audits Consulting Training About Legal Notice Privacy Policy Contact Erstgespräch →
Audit areas

What I audit

🌐
Network Audit
Analysis of your network architecture, firewall rules, segmentation and access controls. Identification of vulnerabilities in internal and external infrastructure.
  • Network segmentation & firewall analysis
  • Open ports & exposed services
  • VPN & remote access controls
  • Patch status of critical systems
☁️
Cloud & M365 Audit
Review of your Microsoft 365 and Azure environment for misconfigurations, excessive permissions and security gaps that could be exploited internally or externally.
  • Permission concept & admin accounts
  • Conditional Access & MFA configuration
  • Exchange Online & SharePoint Security
  • Azure Security Score Review
🎯
Penetration Test
Controlled attack on your systems following recognised standards (OWASP, PTES). Simulated attacks reveal what real attackers would find – before the real thing happens.
  • Externe und interne Penetration Tests
  • Web application testing (OWASP Top 10)
  • Social engineering & phishing tests
  • Detailed findings and action report
Approach

How an audit works

01
Briefing
Joint definition of scope, objectives and framework. Clarification of legal requirements and approvals.
02
Reconnaissance
Information gathering and attack surface analysis – from the perspective of an external attacker.
03
Technical Review
Systematic review of defined systems and infrastructure. Documentation of all findings with criticality rating.
04
Report & Handover
Detailed report with findings, risk rating (CVSS) and concrete recommendations. Personal results review.
Deliverables

What you receive

📄
Technical Audit Report
Full documentation of all findings with technical details, evidence (screenshots, logs) and CVSS risk rating.
🎯
Executive Summary
Summary for management and IT leadership: overall risk, top findings and strategic recommendations on one page.
🗺️
Prioritised Action Plan
Concrete recommendations sorted by criticality – with time estimates, responsibilities and quick wins.
💬
Results Presentation
Personal review of findings with your team – ask questions, understand findings, define next steps.

Know where you stand.

A security audit is the most honest answer to the question: how secure are we, really?

Request Audit Now →