Four areas of work, one method.
In all of them, an assigned analyst does the work. You follow each deliverable, with dates, on the platform.
To get started: three fixed projects
Each takes 2 to 4 weeks at a fixed price. At the end, you receive the report and a proposal for an ongoing service, if it makes sense.
- 30 daysGood place to start
AI usage assessment
Shows which artificial intelligence (AI) tools your team uses and which company data goes into them.
Fixed price quoted within 1 business day
- 2 to 3 weeksGood place to start
Code X-ray
Points out the security flaws in your software, ordered by business risk.
Fixed price quoted within 1 business day
- 2 weeksGood place to start
Machine assessment
Compares server and workstation configuration with public secure configuration benchmarks.
Fixed price quoted within 1 business day
The four areas
Each area groups services with a defined timeline. Choose by the pain your company feels today.
Secure development
A client asked for proof that your software is secure, and your team has no application security specialist.
See Secure development- 2 to 3 weeksGood place to start
Code X-ray
Our analysts examine the code and its dependencies and deliver the findings in order of priority.
Fixed price quoted within 1 business day
- Ongoing
Guided secure pipeline
Every new version goes through the analyses before production. The analyst triages findings with your team.
- Per project
Application pentest
A pentest is an authorized intrusion test. The analyst attacks the application as an intruder would and documents what worked.
Infrastructure
Every server was configured differently, and the auditor wants proof of configuration.
See Infrastructure- 2 weeksGood place to start
Machine assessment
Our analysts measure server and workstation configuration and point out the riskiest gaps.
Fixed price quoted within 1 business day
- Ongoing
Ongoing hardening and compliance
Hardening means adjusting configuration to close attack paths. The analyst applies the standard and tracks it every month.
- On request
Monitoring and response under contract, during the agreed hours and SLA
A dedicated team sets it up in 30 to 60 days. The exact timeline is defined in the proposal.
Governance and compliance
LGPD or ISO/IEC 27001 became a deadline, and the evidence is scattered.
See Governance and compliance- Per project
LGPD compliance
LGPD is Brazil’s data protection law. Our analysts map personal data and organize the evidence of protection.
- Per project
ISO/IEC 27001 readiness
ISO/IEC 27001 is the international standard for information security management. Our analysts prepare the company for the certification audit.
- Ongoing
On-demand security lead (vCISO)
A vCISO is a security lead hired by the hour. They run the security program together with the board.
- First campaign within 30 days
Awareness with phishing simulation
Phishing is a fake message that tries to steal passwords. The team trains employees and measures who falls for the simulations.
Secure AI use
Employees paste company data into AI tools, and nobody knows what left.
See Secure AI use- 30 daysGood place to start
AI usage assessment
A gateway in monitor mode records AI use for 30 days. The analyst delivers the report and a draft policy.
Fixed price quoted within 1 business day
- Ongoing
Ongoing AI governance
The analyst follows AI use every month and adjusts the policy with your company.
How to hire us
Every contract starts with a fixed project. It ends with a proposal for an ongoing service, if that makes sense for you.
- Fixed project
- Scope, timeline and price agreed before we start. It takes 2 to 4 weeks and ends with the report and the plan.
- Ongoing service
- An assigned analyst looks after your environment every month, with a monthly report and evidence on the platform.
The same method in all four areas
Assessment, prioritized plan, execution by our analysts, continuous monitoring and executive report. At each step, you receive a concrete deliverable.
Talk to a specialist for 30 minutes.
Tell us what your company needs. You leave the call with three priorities for your environment.
Prefer to write? Use the email contato@hegeon.com.br.