Why this is now a board-level issue
IT security is a management duty.
- 01
Management is personally liable
For companies covered by NIS2 (in force in Germany since 6 December 2025), cybersecurity is a management duty. Implementation and oversight cannot be fully delegated.
- 02
The GDPR requires regular testing
Art. 32 GDPR requires a process for regularly testing the effectiveness of your security measures. A pentest is the proof.
- 03
Fines in the millions
NIS2 violations can cost up to €10M or 2% of global annual turnover, plus downtime, data loss and reputational damage.
Established brands are affected too: data breaches involving millions of accounts are made public all the time, documented for example on haveibeenpwned.com. Whether NIS2 applies to your company depends on sector and size. These notes do not replace legal advice.
What we take on
Concrete. And measurable.
- 01
Attack with your consent
We only attack systems you own and have approved for testing. We agree on scope and timing together beforehand.
- 02
A swarm of hacker bots
Many AI-driven bots try different attack paths at the same time and combine them, just as real attackers do.
- 03
Report with priorities
You receive every vulnerability found, explained clearly and sorted by what should be closed first.
- 04
Complete remediation
Our IT partner closes the gaps completely. Afterwards we check that they really are closed.
Offers
Start small, test in depth when needed.
Recommended · start here
Basic pentest
€0
completely free, one per company
- Testing of your externally reachable systems: website, email, remote access
- Identification of concrete vulnerabilities
- Findings and recommendations report, prioritised by risk
- No audit or certification, no subscription
Comprehensive pentest
€1,500 to €10,000
depending on scope, one-time or subscription
- Comprehensive test: external, internal and web applications
- Documentation as evidence for auditors, customers and insurers (NIS2, GDPR)
- Evidence to prepare for ISO 27001 certification
- Optional subscription: regular re-tests
How it works
Four steps to your report.
- 1
Send a short email or the form
- 2
Intro call and written authorisation
- 3
Free basic pentest
- 4
Report and walkthrough of the results
Developed by an IT expert
Not an AI toy. Built by Ali Karpuzoglu.
The pentest was developed by Ali Karpuzoglu, our partner and developer with more than seven years of experience in computer science, machine learning and autonomous systems.
As a developer, Ali sees where systems are weak, and that is exactly where his test starts. The hacker bots behave like real attackers, and he fixes the gaps found together with our IT partner.
Ali Karpuzoglu on LinkedIn →- Master of Science, Autonomous Systems
- Technical University of Darmstadt
- Bachelor of Science, Medical Computer Science
- Mannheim University of Applied Sciences
- Focus
- Machine learning, natural language processing, robotics, autonomous systems
A good fit if
Who this is for.
- Your website or system processes customer data.
- You do not know how well your system would hold up against a real attack.
- You want to close gaps before someone else finds them.
Legal framework
We only test with your authorisation.
- 01We only test systems for which the owner has given us written authorisation beforehand. No authorisation, no test (Section 202a German Criminal Code).
- 02We agree scope, period and excluded systems together in advance.
- 03We check that you are entitled to authorise testing of the website you name.
- 04Any vulnerabilities found are only exploited in a controlled way and only as proof, without changing or extracting data.
- 05All results are treated confidentially and shared only with you.
These notes do not replace legal advice.
Free quick test
Test your website for free.
Enter your email address and your website. We run a short test, 100% free of charge, and send you the result. A comprehensive test of your entire system is available on request.
- Basic pentest: 100% free, one per company, no contract and no subscription
- Result with the key vulnerabilities by email
- Comprehensive test and remediation on request