.png){kind=small}
Services
Find, fix and prove your security, with one partner.
From penetration testing and cloud security to ISO 27001 readiness and a virtual CISO, explore every ThreatGaurd service in one place, grouped into four practices.
- NDA in place before any access
- Clear, fixed-scope proposals
- Reports for leaders and engineers
- Mapped to ISO 27001, SOC 2 and more
All services
Every service, in one place.
Choose a single service or combine several. Every engagement is scoped to your environment, timelines and goals.
01 · 5 services
Cybersecurity
Expert-led testing and hardening that shows how an attacker could get in, and what to fix first.
Explore Cybersecurity-
Vulnerability Assessment & Penetration Testing
Core service
Expert-led testing of networks, Active Directory, applications, APIs, mobile apps and cloud, with proof of real risk.
- External & internal
- Web & mobile
- Retesting
-
Web & API Security Testing
Manual testing of applications and APIs for access control, authentication and business logic flaws.
- OWASP Top 10
- GraphQL
- Business logic
-
Network & Firewall Security Assessment
Firewall rule review, segmentation testing and perimeter assessment to close risky access paths.
- Rule review
- Segmentation
- VPN
-
Endpoint & Infrastructure Security Assessment
Servers, endpoints, Active Directory and EDR coverage, assessed the way an internal attacker would.
- Active Directory
- Assumed breach
- EDR
-
Security Configuration Hardening
Secure baselines for servers, endpoints, network devices and cloud, applied safely in stages.
- CIS Benchmarks
- Staged rollout
- Baselines
02 · 5 services
Cloud Security
Security for AWS, Microsoft Azure and Google Cloud, from configuration and identity to Kubernetes and pipelines.
Explore Cloud Security-
Cloud Security Posture Assessment
Start here
A read-only review of your cloud configuration against CIS Benchmarks, with a prioritised plan to fix it.
- Read-only
- CIS Benchmarks
- Logging
-
Multi-Cloud Security
One consistent security standard across every cloud, with gaps compared side by side.
- One baseline
- Scorecard
- Guardrails
-
IAM Security
Identity providers, MFA, privileged access and cloud IAM, plus joiner, mover and leaver processes.
- Entra ID & Okta
- Privileged access
- MFA
-
Cloud Infrastructure Security
Cloud penetration testing and architecture review to find exploitable attack paths to your data.
- Cloud pentest
- Attack paths
- Architecture
-
Kubernetes, Containers & DevSecOps
Clusters, container images, CI/CD pipelines, infrastructure as code and secrets, secured from code to cloud.
- Kubernetes
- CI/CD
- IaC
03 · 4 services
Risk & Compliance
Understand your risks, prepare for audits and regulations, and stay ready for disruption.
Explore Risk & Compliance-
Information Security Gap & Risk Assessment
Start here
An independent view of your maturity and risks, with a risk register and a board-ready roadmap.
- Maturity profile
- Risk register
- NIST CSF 2.0
-
ISO 27001 & SOC 2 Readiness
From gap assessment to audit day, with policies, controls and evidence ready for your auditor.
- ISO/IEC 27001:2022
- SOC 2 Type 1 & 2
- Mock audit
-
Regulatory & Privacy Compliance
Data mapping, notices, rights requests and breach readiness for the privacy laws that apply to you.
- DPDP Act
- GDPR
- HIPAA
-
Business Continuity & Disaster Recovery
Business impact analysis, recovery targets, continuity plans and tested ransomware recovery.
- RTO & RPO
- ISO 22301
- Exercises
04 · 2 services
Managed Security
Ongoing risk reduction and senior security leadership, without building a full in-house team.
Explore Managed Security-
Managed Vulnerability Management
We find, prioritise and track vulnerabilities across network, cloud and endpoints, and verify every fix.
- Continuous
- Prioritised
- Fix verification
-
Virtual CISO (vCISO)
An experienced security leader who sets strategy, runs your security programme and reports to your board.
- Strategy
- Board reporting
- Flexible time
No services match your search
Try a different word, or tell us what you need and we will recommend the right service.
Find the right service
Not sure where to start?
Pick the situation closest to yours. If none fit, our team will recommend the right service, with no obligation.
- We do not know where we stand, or where to start. Recommended service: Gap & Risk Assessment
- We need independent proof of our security for an audit, a customer or the board. Recommended service: VAPT
- We are launching a new application, portal or API. Recommended service: Web & API Security Testing
- We moved to the cloud quickly and are not sure it is configured securely. Recommended service: Cloud Security Posture Assessment
- We need ISO 27001 or SOC 2 to win or keep customers. Recommended service: ISO 27001 & SOC 2 Readiness
- We must comply with the DPDP Act, GDPR or HIPAA. Recommended service: Regulatory & Privacy Compliance
- We are not sure how quickly we could recover from ransomware. Recommended service: Business Continuity & DR
- We need to keep finding and fixing vulnerabilities all year. Recommended service: Managed Vulnerability Management
- We need senior security leadership, but not a full-time CISO. Recommended service: Virtual CISO
Get started
Tell us what you need. We will scope the right service.
Share your goals and environment. We will come back with a clear, fixed-scope proposal, with no obligation.