APPSEC
CZ SK EN
TESTING, PROTECTION, CONSULTING

We find weak points. We strengthen your defence.

An authorised test verifies what is genuinely vulnerable in your systems. We then help you fix it and put protection in place that your team can operate in the long term.

Discuss our situation Explore our services
  • Verified risks.
  • Clear priorities.
  • Help with implementation.
  1. Perimeter firewall, VPN, e-mail
  2. Network segments and identities
  3. Applications web, API, cloud
  4. Data databases and backups
  • Authorised testing explores an attack path
  • Identified weakness
  • Remediation and verification
Sales, deployment and support
SentinelOne Heimdal Security
Methodological frameworks we draw on
  • OWASP
  • PTES
  • OSSTMM
01TWO PERSPECTIVES, ONE OBJECTIVE

Testing and protection with one partner.

Test findings feed directly into the protection plan. You do not have to hand them to another supplier and explain everything again.

SINGULARITY PLATFORM

Endpoints, cloud, identities and data in one platform

SentinelOne Singularity combines protection for computers, servers, cloud workloads, identities and mobile devices with security data analytics and AI assistance. Modules share a console and data, allowing alerts from different areas to be investigated together.

  1. 01Module and licence selectionBased on your environment, risks and team capacity.
  2. 02A pilot on your devicesWe verify operational impact and alert quality.
  3. 03Deployment and policy tuningGradual rollout with a plan for operations and exclusions.
  4. 04Support as agreedConsultation and operational assistance.
Arrange a demonstration All SentinelOne modules

SentinelOne supplies the product, its features and vendor services. APPSEC provides selection, pilot, deployment and support as agreed in the proposal.

Singularity One console, shared data
SAMPLE DELIVERABLE

Evidence, impact and a remediation plan.

We explain every finding to management and provide evidence for technical teams. Know what to fix, why and how to verify the result.

How we work together →
SAMPLE FINDING Severity: high

Access to other customers' orders through the API

Affected asset
Orders API, endpoint /api/orders/{id}
Impact
An authenticated user changes an order number to read other customers' data.
Evidence
Reproduction steps and shortened request and response without sensitive data.
Recommendation
Verify record ownership on the server for every request.
Verification
Retest fixes within the proposal's agreed scope.
# logged in as account A
GET /api/orders/1044 HTTP/1.1
Authorization: Bearer ••••••••

HTTP/1.1 200 OK
{ "order": 1044, "owner": "account B" }
03Frequently asked questions

Before our first conversation.

We do not know whether we need a test or new technology.

That is common. Tell us what you are facing and why. Together, we will decide whether to start with testing, analysis, consulting or technology.

We have a small IT team. Is that a problem?

No. We adapt the engagement to your available time and people. For technologies, we also establish who will review events and what support you need.

Does the first consultation commit us to anything?

No. The first conversation helps us understand your needs and suggest a next step. We confirm the scope, price and terms in a proposal before starting work.

How much will it cost?

The price depends on scope. Testing depends on the number and complexity of targets; technology depends on devices, licences, deployment and support. We prepare a proposal after a short conversation.

INITIAL CONVERSATION, NO OBLIGATION

Not sure where to start? Tell us what you are facing.

You do not need to know whether you need a test, a technology or a consultation. We will suggest a suitable next step based on your situation.

Arrange a consultation