Skip to content

What we do

Four areas, one security standard.

Security is not bolted on. It is designed in. From designing a platform to responding to an incident, we work with the same method.

  1. Build

    Secure development

    Platforms secured from the architecture up, not patched after go-live.

    We design and build custom platforms (web and mobile applications, APIs, back-end systems) with security built into the architecture rather than patched after go-live. This is full software engineering, not low-code tool integration.

    • Web, mobile and API platforms
    • Threat modeling from the design stage
    • Code reviewed every sprint
    See details

  2. Test

    Application security

    We find the flaws before anyone else, then help you fix them.

    We test your applications and infrastructure the way an attacker would, then support your teams until the fixes are in. The goal is not another report, but closing the flaws that can actually be exploited.

    • Web, API and infrastructure penetration testing
    • Manual and tool-assisted code review
    • Remediation and retest
    See details

  3. Protect

    Custom cybersecurity

    Incident management setups tailored to your organization and its context.

    We set up incident management capabilities tailored to each organization and its context, not a generic SOC solution imported as is. Our knowledge of the West African field is an asset for organizations operating there.

    • CERT / CSIRT setups
    • Threat intelligence and detection
    • Crisis management and on-call
    See details

  4. Train

    Advisory and training

    Building your teams' skills, beyond handing over a report.

    We support technical leadership and development teams: maturity assessment, risk prioritization, audit readiness, and hands-on workshops so your teams apply good practices themselves.

    • Maturity assessment
    • Prioritized roadmap
    • Hands-on workshops
    See details

Existing solutions

Design when needed, adapt when it's better.

We design our own technologies, but we don't reinvent what already works. If you prefer, we start from an existing solution, open source or commercial.

Use
Deploy and configure a proven solution, open source or commercial, when it meets the need.
Adapt
Customize, harden and integrate that solution into your environment and constraints.
Extend
Build the missing modules, connectors or interfaces, with the same security standards.
Design
Build a custom technology when nothing existing fits.

Let's talk about your project.

Describe your need in a few lines. We usually get back to you within two business days.

Get in touchcontact@pcybox.com