Adventure Spirit d.o.o. · Zagreb, Croatia +385 95 504 1496 info@adventurespirit.hr GRC Portal
Home›Services›Security audits and testing
Services

Security audits and testing

Penetration testing, vulnerability assessment, configuration review, social engineering simulations and reports written for both technical and board-level audiences.

Offensive security

How we work

01Scope and authorisation
Written authorisation, agreed scope, timing and rules of engagement.
02External exposure
What is reachable from the internet, established independently of the IT inventory.
03Penetration testing
Exploitation attempts within the agreed scope, with all activity logged.
04Domain assessment
Relationships between objects - delegation, privileged membership, legacy protocols, backup access.
05Social engineering
Phishing simulation where agreed, with results reported in aggregate, never per person.
06Reporting
One report for the technical team with reproduction steps, one summary for the board.

What you get

Technical report
Board summary
Ranked findings
Remediation plan
Retest

Measures of Annex II this service covers

04 Security of human resources and digital identities 05 Basic cyber hygiene practices 06 Securing network cyber security 07 Physical and logical access control to network and information systems

Sectors where it is most in demand

Digital infrastructure and ICT Banking and finance Energy

Check for yourself before we talk

Entity categorisation check Readiness check against the 13 measures Incident reporting deadline calculator

Not sure where you stand?

Half an hour of conversation, with no obligation. By the end you know what needs doing and in what order.

Book a conversation See our services

From the knowledge base

Offensive security
Active Directory: five findings we see in almost every assessment
Domain infrastructure rarely falls to an unpatched vulnerability. It falls to configuration that once made sense, was left behind, and that nobody looks at any more. These five findings show up in most environments.
18 August 20267 min read
Cyber insurance
What cyber insurers actually ask before they quote
A cyber insurance questionnaire is not a formality but a risk assessment somebody else is doing about you. The questions get more specific every year, and an inaccurate answer can become grounds for declining a claim.
7 July 20266 min read

All services

CSA / NIS2 compliance GDPR compliance ISO/IEC 27001 - Information security ISO 9001 - Quality management ISO 14001 - Environmental management All services