Virtual CISO
A fractional chief information security officer, who owns your security program, reports to leadership and the board, and works as part of your team.
Build security your customers can trust
Senior security leaders and engineers who set up your security program, prepare you for audits, test what you build, and stand by you when something goes wrong, so the feeling and the reality of security converge.
Everything a security program needs
From board-level strategy to hands-on testing. Pick a single engagement, or let us run your security function end to end.
Leadership and strategy
Direction, decisions, and accountability at the top.
Risk assessment, strategy and roadmap
Enterprise and technology risk assessments that turn into a prioritized IT, AI, and security roadmap, with advice while you implement it.
Leader mentorship
Continuous and on-demand mentorship for board members, CISOs, and senior security managers stepping into leadership roles.
Engineering and design
Security built into your organization, systems, and products.
Resident security engineers
Highly qualified engineers embedded in your environment. They grow your team’s expertise and set up change management and bug bounty triage.
On-demand security support
A lightweight option through Amleth: experts in your Slack or Teams channel, for a flat monthly fee.
Amleth serviceOrganizational, system and product security design
Security processes and documentation for your organization, security features for your products, and trust profiles your customers can rely on.
Assessment and assurance
Evidence that your controls work, for you, your customers, and your auditors.
Security reviews
Application and IT security assessments, including design and protocol reviews, and code and configuration reviews.
Penetration tests
Black-box and grey-box testing of IT infrastructure, web applications, and mobile applications.
Readiness assessment
Gap analysis and audit readiness for SOC 2, ISO 27001, ISO 42001, and PCI DSS, and for EU regulations such as NIS2, DORA, the AI Act, and the Cyber Resilience Act (CRA).
Privacy and data protection
Meet your privacy obligations, and protect the people behind your organization.
DPO and EU representative
An external data protection officer under GDPR, and an EU representative for organizations established outside the EU that serve people in it.
Privacy impact assessment
Data protection impact assessments for new products, systems, and processing activities, with practical measures to reduce the risks we find.
Personal security and privacy
Discreet protection for high-profile individuals, executives, and media professionals: a smaller digital footprint, secured personal devices and accounts, and a plan for doxxing and harassment.
Cyber resilience
Spot threats early, act decisively when an incident hits, and keep the business running through it.
Security monitoring 24/7
Night/Shift, our security monitoring and posture management platform, runs on-premises or in public or private clouds, with an optional fully or partially embedded SOC team.
Night/Shift platformCrisis management
The right actions during a security incident: investigation, ransomware negotiation, crisis communication, and mitigation.
Business continuity and disaster recovery
Continuity and recovery plans built around your critical processes and systems, proven in regular exercises and recovery tests, and reported to leadership and auditors.
Let’s talk about your security
Tell us where you are and where you need to be. We aim to respond within 24 hours, weekends included.