Information security · Baku

Audit, pen-test, support — one team,
based in Baku.

We help local organisations assess their information security, fix what matters, and stay compliant. No buzzwords — just structured audits, penetration tests, and ongoing support.

ISO 27001 · GDPR
Standards we work with
Fortinet · MS · Cisco
Vendor partnerships
< 1 day
Initial response
AZ · RU · EN
Languages
What we do

Six services, no upsell

Six services that cover what most companies in Azerbaijan actually need. If your problem sits outside this list, we will say so and point you to someone who handles it.

Security audit

Structured review of your infrastructure, processes, and policies against ISO 27001 and local regulatory requirements.

Penetration testing

External and internal pen-tests of web applications, networks, and Wi-Fi. Reports follow OWASP and PTES.

Vulnerability assessment

Periodic scanning of public-facing assets and internal systems with prioritised, actionable findings.

Incident response

Help when something has already happened: triage, containment, root-cause analysis, and reporting.

Awareness training

Phishing simulations and short, practical sessions for staff — Azerbaijani, Russian, or English.

Compliance support

Documentation, policies, and gap analysis for ISO 27001, GDPR, and Azerbaijani data protection law.

Our focus

Local context, global signal

We track CERT bulletins, vendor advisories, and exploit chatter from around the world, then filter for what matters in Azerbaijan — your stack, your regulators, your attackers.

Source region
Inbound advisories
Our office
Recent advisories

What we are currently tracking

A small selection of public advisories relevant to clients in our region. Full list shared with subscribed customers.

LIVE
CRITICAL 
HIGHFortinet SSL-VPN — credential leakage advisory (FG-IR-24)
HIGHPhishing kits targeting Azerbaijani banks via lookalike domains
MEDWordPress plugin — privilege escalation in popular contact form
MEDIncreased brute-force attempts on RDP from EU IP ranges
LOWNew ransomware variant — currently low prevalence in CIS
$  
Priority intake

Not sure what to fix first?

Thirty minutes on a call, no slides. Tell us what you have — we tell you which two or three things move the needle, and which can wait.

No obligation. No upsell. Just a conversation.

Schedule a call
Get in touch

Tell us about your environment

Drop a message and we will reply within one business day. For sensitive matters, ask for our PGP key in the message.