Site Audit · Domain Check

Checks the health of a domain's public perimeter. Ideal for recurring brand audits.

• → DNS records (A, AAAA, MX, TXT, CAA, DMARC)
• → SSL/TLS chain + expiry + cipher suites
• → Security headers (HSTS, CSP, X-Frame-Options)
• → Certificate Transparency logs
• → Risk score + remediation

Network Scan · Recon + CVE

The ports exposed on an IP/range and the known CVEs for them, from Nuclei templates.

• → TCP port scan (Naabu)
• → Nuclei templates
• → CVE detection

Web App Audit · OWASP Top 10

A web application audit, mapped to the OWASP Top 10.

• → SQL injection (sqlmap)
• → WordPress (WPScan)
• → Nuclei templates
• → Auth rate-limit probe

Code Audit · Secrets + Static Analysis

An audit of your codebase with automated tools.

• → Secrets detection (gitleaks)
• → Static analysis (Semgrep), where enabled
• → Vulnerable dependencies (OSV)
• → Remediation recommendation per finding

Compliance · NIS2 / GDPR

Automated checks. For NIS2, the report gives no compliance verdict.

• → NIS2, Romania: the evidence next to the 218 controls of the DNSC catalogue (Order 1/2026)
• → NIS2, other EU states: Directive (EU) 2022/2555 art. 21(2) with the evidence on NIST CSF 2.0
• → Outside the EU: NIST CSF 2.0 as good practice
• → GDPR Art. 32 — security of processing
• → ISO 27001 controls map
• → Recommendations

The country is fixed when the audit ends: the one declared for the audited entity in the order or, for a re-run, the original audit’s; otherwise Romania for a company found in the Romanian trade register, then the country in Settings → Company details; without an answer, Romania. Pay-as-you-go audits: the PDF report has no chapter on the NIS2, IEC 62443 and CRA controls.

Full Audit · Site + Network + Web

One audit, one report.

• → Site + Network + Web (+ code analysis where enabled, if you provide a repo)
• → AI-generated executive summary
• → PDF report