Platform only
You licence Violet Security and your team runs it. We support the rollout and then step back.
Services
The software records. The team brings the judgement.
Violet Security handles traceability and the report. Deciding what to audit, reading a finding or defending a position in front of a supervisor is still work for people.
How we work
Three ways in
You can buy the software alone, the service alone, or the service run on the platform. The third is the one that leaves a case file behind.
Service only
We run the engagement with our own method and deliver the result in whatever format you use today.
Recommended
Service on the platform
We run the engagement inside Violet Security. When it ends, the whole case file stays with you.
Catalogue
What we do
Audit and pentesting
Technical execution across infrastructure, web and mobile applications, cloud and Active Directory, in black, grey or white box mode.
- Scope agreed in writing before we start, with windows and rules of engagement
- Findings prioritised by real exploitability, not by CVSS alone
- Verification retest included in the scope
- Deliverable in DOCX and PDF, and a live case file on the platform
Compliance consultancy
Gap analysis, remediation plan and support through to certification or the declaration of conformity.
- NIS2, DORA, ENS, ISO 27001, ISO 22301 and the applicable sector scheme
- Statement of applicability and the supporting documentation set
- Preparation for the certification audit and support on the day
- Risk register and exceptions, with the governance around them
Incident response
Containment, eradication and recovery, with the forensics and the paperwork that regulatory notification demands.
- Initial triage and severity classification
- Forensic analysis and scoping of the exposure
- Support with notifying the competent authority and those affected
- Post-incident review with actions linked back to controls
CISO as a Service
An outsourced CISO, or reinforcement for the one you have, sitting on the board and owning the security roadmap.
- Security master plan and quarterly follow-up
- Position report for the board and the audit committee
- Governance of third-party risk
- Dealing with auditors, supervisors and insurers
Rollout and migration
Violet Security up and running, your audit history imported, and the first full cycle executed alongside you.
- Tenants, roles and client portal configured
- Import of your finding and evidence history
- Connection of your existing scanners and tools
- A first full cycle run in parallel with your team
Training and enablement
Your team enabled on the platform, plus specific training on the frameworks that apply to your organisation.
- Onboarding by role: auditor, manager, compliance lead
- NIS2, DORA and ENS training aimed at concrete obligations
- Tabletop exercises based on real, anonymised incidents
- Material and recordings that stay inside your organisation
The team
Team certifications
Profiles that pair technical depth with risk analysis, on a base of computer engineering, telecommunications and criminology.
CISM
Certified Information Security Manager
CISSP
Certified Information Systems Security Professional
ISO 27001
Lead Auditor
ISO 22301
Lead Auditor
CRISC
Risk and Information Systems Control
CDPSE
Data Privacy Solutions Engineer
CCSP
Certified Cloud Security Professional
Proof of concept
Try it on your own audits
We stand up an environment with your real scope, your findings and your frameworks. No cost, no card, no commitment to continue.
- Dedicated, isolated environment, ready in 48 hours
- We import your scanner results and your history
- Technical support for the whole trial