Compliance Readiness: KVKK, ISO 27001, NIS2
Technical and process-focused preparation for KVKK, ISO/IEC 27001:2022 and, for Germany, NIS2/GDPR requirements.
Services
Continuous Security and Attack Surface Monitoring
Your infrastructure changes every day: a new subdomain, an opened port, a certificate about to expire. Continuous monitoring closes the gap between annual tests.
We scan your internet-facing assets at regular intervals and compare each result with the previous state. When a new risk appears, we let you know without waiting for the next report.
If newly published, actively exploited critical vulnerabilities affect the technologies you use, we flag those separately too.
What we test
- New subdomains and DNS changes
- Newly opened ports and services
- TLS certificate expiry and configuration changes
- Critical vulnerabilities affecting your technology stack (CISA KEV)
- Changes to email security records
- Regressions in website security headers
How we work
Baseline
We start by recording your asset inventory and accepted risks as the baseline.
Regular scanning
We run checks at the agreed frequency and detect changes.
Triage
A specialist reviews every alert, so you receive actionable information rather than noise.
Monthly summary
A monthly report covers changes as well as closed and open risks.
What you receive
- Prompt alerts for significant changes
- Monthly monitoring report
- Up-to-date asset inventory
- Trend and risk summary
A good fit for
- SaaS and e-commerce businesses that release frequently
- Organisations with many domains and servers
- Teams that want to preserve the gains of a penetration test
Frequently asked questions
Will monitoring put load on our systems?
No. Checks are lightweight and scheduled, and you don't need to install agents on your systems.
Is this a SOC service?
No. We are not a 24/7 incident response centre. We regularly monitor your internet-facing attack surface and report risks. We prefer to make that distinction clear from the start.
Related services
Security Consulting
Architecture reviews, a security roadmap and hands-on technical guidance for your team.
Reporting: Executive Summary and Technical Report
Clear, actionable reports for two audiences at the end of every engagement.
See your weaknesses before attackers do.
Let's define the scope together. You'll receive a written proposal with the right type of test and a clear timeline.