Mapping entry points
We identify open ports, services and system versions, and investigate known vulnerabilities within the agreed part of your IT environment.
02 / VULNERABILITY ASSESSMENT
Find the weaknesses.
Set the right priorities.
We examine agreed IT systems for technical weaknesses and test whether selected findings can be exploited. You get a clear view of risk and advice on what your IT team or service provider should prioritise.
Request a quoteSUITABLE FOR
For businesses that need an up-to-date view of exposed systems, accessible services and known vulnerabilities, whether as an initial check or regular follow-up.
01 / SCOPE AND DELIVERABLES
From insight to action.
Checking web services
Web servers and services are examined for known weaknesses and insecure settings that could create opportunities for an attacker.
Controlled validation
Selected findings are tested to assess whether they can actually be exploited. Active testing follows the scope and boundaries agreed in advance.
A report you can use
The report covers findings, severity, relevant CVE references and recommended actions. Critical findings are highlighted, with logs or screenshots where possible.
Daily, weekly or monthly scans with PDF reports can be arranged. The assessment is a snapshot of the agreed systems, and testing and reporting are treated confidentially.
HOW WE GET STARTED
Agree the systems
We agree the systems, timing and boundaries for discovery and active testing.
Assess and evaluate
Findings are examined and assessed against risk and potential consequences.
Follow up
IT receives a basis for prioritising remediation. Further scans can be agreed.
02 / REGULATIONS AND DOCUMENTATION
Supporting your security work.
Our assessment of how the service can support your work. Applicable requirements depend on your organisation and how the service is used.
Norwegian Digital Security Act
Documented vulnerabilities can support risk assessment and the prioritisation of technical measures.
NSM guidanceGDPR / privacy
Results can inform the evaluation of security measures around systems that process personal data.
GDPR, including Article 32DORA
Vulnerability assessments can form part of an entity’s risk-based testing programme and follow-up of findings.
DORA: testing and trainingThe service is not a certification or a guarantee of full compliance. The regulatory information is general guidance, not legal advice. Sources checked on 18 September 2026.
Useful to know before we start.
Is this just an automated scan?
The service description covers discovery, analysis, controlled testing of selected weaknesses and reporting. The precise scope and level of active testing are agreed before starting.
Which tools are used?
The service description lists Nmap for discovery, Nikto for examining web services and Metasploit for controlled testing. The value for your business is understanding the findings and what needs to be fixed.
What is a CVE?
A CVE is a reference identifier for a publicly known vulnerability. It helps you find information about the weakness and relevant updates.
NEXT STEP / A NO-OBLIGATION CONVERSATION
Get a clearer view of your risk
Briefly describe the systems or services you would like assessed, and whether you need a one-off assessment or ongoing follow-up.
We agree needs, scope and pricing before starting.
An enquiry carries no obligation to purchase.