Cyber Security
Consultants

Our Services

NetSafety offers a wide range of cybersecurity risk management services for corporate clients as well as small and medium sized companies. We deliver our services remotely around the globe, while preserving the high quality of our deliverables in line with the international best practice standards.

CYBER SECURITY SERVICES

RISK MANAGEMENT SERVICES

Company Profile

NetSafety is a cyber security consulting firm, specialized in information security audit and compliance, network and web application security, penetration testing, business continuity planning and other corporate risk management services. Our consultants are all internationally certified professionals (CISSP, CISA, CEH, etc.), with extensive experience in their respective fields of information security and risk management.

We perform our services remotely or work in direct contact with our clients, depending on the specific requirements of each engagement. The consulting team is selected in accordance with the skills required for the success of each project and our deliverables go through a detailed quality review process to meet the specific requirements of every client.

NetSafety was founded in 2009, in Sofia, Bulgaria, since when we have developed into an international consulting practice, with a global client portfolio. The team is managed by established information security professionals with vast international consulting experience in industry leading enterprises. Many successful projects across Europe, North America, UK, Africa and Australia, provide a proven professional track record and guarantee the high quality of our services.

Clients Cases

Information Security Consulting Company Australia

An Australian based Payment Processing Solutions provider for financial institutions, governments and the corporate organizations.

Project Requirements:

The client needed an yearly external and internal network layer penetration test for their PCI DSS v2 certification requirement.

Consulting Service:

We performed the penetration test procedures for the external access points and noted all vulnerabilities in the services and supporting servers. We then obtained VPN access and performed the internal security assessment where we noted encryption weaknesses, server vulnerabilities and configuration issues.

Value Added:

The client obtained assurance over the state of the internal and external network security and provided our reports to the PCI QSA auditors as part of the yearly process to update their PCI compliance.

Information Security Consulting Company Canada

A Canadian-based, international mining company engaged in the acquisition, exploration, development and mining of precious metal properties.

Project Requirements:

An yearly IT Audit of their whole global infrastructure in accordance with the 89 control objectives from the COBIT framework.

Consulting Service:

We performed the audit procedures discovering many control gaps and areas of improvement in their business controls and processing.

Value Added:

Each year the client develops further their risk mitigation and control strategy. Their business has fast growth and has maintained good security controls in their innovation. The client continues to use our services on annual basis as part of their risk management program.

Information Security Consulting Company Switzerland

A Swiss application and mobile development company that specializes in web and brand development as well as complex application platforms for large scale corporate use.

Project Requirements:

The client required a web application penetration test to verify that all application layer security controls are functioning correctly in their newly developed reservations platform for web and mobile device use.

Consulting Service:

We performed all testing procedures covering all security areas as defined in our process methodology and worked with the development team to fix the various vulnerabilities noted during our tests.

Value Added:

The client achieved a secure functioning product that has proven itself over the years and continues to use our services as part of their vulnerability management program.

Information Security Consulting Company United Kingdom

A large scale analytics company for the UK insurance market, that provides data analytics, market trends, customer surveys, product research and other statistical information for their clients.

Project Requirements:

The client wanted to become ISO27001 compliant and required the corresponding policies, procedures and internal control environment to be implemented for their business operations.

Consulting Service:

We developed the relevant information security policy with detailed access management, change management and operations management procedures.

Value Added:

The client gained compliance and was able to provide business assurance to trading partners thus growing its partnerships and client base.

Information Security Consulting Company Zimbabwe

A large financial holdings institution located in Zimbabwe with many branches across the country consisting of a bank, an insurance company and sales stores.

Project Requirements:

The client requested an external and internal network layer penetration test covering all branches and business units.

Consulting Service:

We performed the penetration test procedures for the external access points and noted all vulnerabilities in the services and supporting servers. We then obtained VPN access and performed the internal security assessment where we noted encryption weaknesses, server vulnerabilities and configuration issues.

Value Added:

The client obtained assurance over the state of the internal and external network security and developed a vulnerability management program to allow for business growth while maintaining security levels across the board.

A large scale analytics company for the UK insurance market, that provides data analytics, market trends, customer surveys, product research and other statistical information for their clients.

Project Requirements:

The client requested a business wide asset evaluation and risk assessment as part of the ISMS integration project.

Consulting Service:

We created an asset register with asset values in term of security, availability and confidentiality for all business assets and then made a risk matrix for their vulnerabilities, impacts and probability of occurrence providing a complete risk management tool for the business.

Value Added:

The client gained insight into the high risk areas of their processing environment and a tool through which they can monitor, update and evaluate their business risks.

Information Security Consulting Company France

A payment solutions platform and gateway provider for transaction processing for a major European Bank.

Project Requirements:

The client requested to have a penetration test on his gateway host and web application platform in accordance with the PCI DSS reporting requirements.

Consulting Service:

We performed the web application penetration test and noted a number of critical weaknesses with their corresponding resolutions that had to be implemented before the system was released.

Value Added:

The client noted a number of serious issues on the system and went on to resolve these and secure the system before its live certification and release.

Information Security Consulting Company Israel

A global outsourcing company that manages the applications and billing systems of telecom companies.

Project Requirements:

The client requested a SOC II Audit over their business environment in Bulgaria to provide internal control assurance to their clients.

Consulting Service:

We performed the SOC II audit procedures in line with the standard criteria for security, availability, confidentiality, processing integrity and privacy and provided a detailed report on their environment and business processing.

Value Added:

The client gained business confidence and is able to provide business assurance and satisfy their clients risk concerns.

A Canadian-based, international mining company engaged in the acquisition, exploration, development and mining of precious metal properties.

Project Requirements:

The clients required an external penetration test with specific risk considerations for their VOIP infrastructure.

Consulting Service:

We performed the standard network layer test and then used system specific testing tools to get into the network and try access the VOIP connections. Our report provided insight and understanding on how to address the specific risk concerns.

Value Added:

The client gained a clear understanding of the risks associated with their network environment and business services. A timely security strategy was developed to address these risks and provide assurance over the confidentiality and integrity of their data. The client continues to use our services as part of their vulnerability management program.

Information Security Consulting Company Bulgaria

A web development team that creates platforms for multinational companies.

Project Requirements:

The clients required an IT Audit in line with the ISO27001 control requirements.

Consulting Service:

We performed the audit procedures covering all 11 areas of the ISO control requirements and provided a detailed report of the control deficiencies, their associated impact and the recommendations for their resolution.

Value Added:

The client gained valuable insight over the controls in their information processing environment and was able to provide assurance over their business integrity to their clients.

A group of architecture, engineering and interior design companies based in Zimbabwe.

Project Requirements:

Define network segmentation, data classification, firewall traffic policy, security permissions on the file server and manage the security event monitoring for the group of companies.

Consulting Service:

We introduced policies and procedures for the various business processes and implemented the corresponding security measures in the information processing environment.

Value Added:

The company minimized the effect of security breaches and was able to quickly recover from various incident and attack scenarios without financial losses or reputational damage.

Contacts

NetSafety is a cyber security consulting company with a head office base in Sofia, Bulgaria. Our firm's reputation is built on integrity, professional business conduct and a high quality of service in everything we do.

Simply call us to schedule a meeting and discuss your business needs.

NetSafety
Cyber Security Consultants

E-mail:
team@netsafety.eu

Contact:
(+359) 88 9387598

Office location:
Sofia, Bulgaria

Cyber SecurityConsultants

Our Services

CYBER SECURITY SERVICES

RISK MANAGEMENT SERVICES

network penetration testing

web applicationpenetrationtesting

it audit &compliancereviews

application controls & data analytics

customizedsecuritypackages

data recovery& incidentresponse

preparationfor compliance &certification

businesscontinuity planning

Company Profile

Clients Cases

Contacts

Cyber Security
Consultants

network
penetration
testing

web application
penetration
testing

it audit &
compliance
reviews

application
controls &
data analytics

customized
security
packages

data recovery
& incident
response

preparation
for compliance &
certification

business
continuity
planning