Capabilities
Cybersecurity
Assessment, hardening and incident response for websites, applications and servers.
Sample review
- Valid TLS certificate
- Unneeded ports closed
- Incomplete security headers
- Backups verified
Who it is for
Organizations that run internet-facing services or handle personal data and need to know how exposed they are.
Problems we solve
- Websites and admin panels without security headers or updates.
- Personal data without clear controls (Colombia's Law 1581 of 2012).
- No plan to respond to an incident.
What we deliver
- Exposed surface assessment with prioritized findings.
- Hardening of servers, websites and panels.
- Remediation plan with owners and dates.
- Incident response support.
- Executive and technical report.
Related work
Public · Interface · Security
Portal and citizen requests for a public urban development company
Frequently asked questions
Do you run intrusive tests?
Only with written authorization, a defined scope and agreed time windows. The initial assessment is passive.
Does it help a public institution with MSPI?
Yes. Findings and the remediation plan are organized to feed MinTIC's Information Security and Privacy Model.
Do you work with WordPress or PHP?
Yes. We harden WordPress, PHP and custom applications.