# A resilient IT foundation for your business.

> IT security protects a company’s networks, endpoints, cloud services and business applications against attacks such as ransomware and phishing. Zyberum performs infrastructure, cloud, web application and API penetration tests, helps organisations prepare for incidents and NIS2, and offers Zyberdome, a fixed-price 24/7 managed SOC for small and medium-sized businesses.

IT security for businesses: infrastructure, web application and cloud penetration testing, managed SOC and incident readiness, including healthcare.

Source: https://zyberum.com/it-security

Ransomware, phishing and exposed cloud services hit companies of every size. We test your infrastructure and applications the way an attacker would, and keep watch around the clock with our managed SOC.

## IT security services

### Infrastructure pentest

External and internal network tests, Active Directory attack paths and segmentation reviews.

### Web, API & mobile

Penetration tests of web applications, APIs and mobile apps following OWASP methodologies.

### Cloud security

Configuration reviews and attack paths in AWS, Azure, Microsoft 365 and Google Cloud.

### Managed SOC

Zyberdome: endpoint protection, 24/7 monitoring and incident response at a fixed monthly price.

### Application security

Secure coding, code review and DevSecOps for teams that build their own software.

### Incident readiness

Incident response plans, tabletop exercises, NIS2 reporting processes and awareness training.

## Protecting patient data and medical devices

Digitalisation in healthcare brings telemedicine, connected devices and electronic records, and makes hospitals and practices a prime target for ransomware. We help providers and medical device manufacturers protect sensitive data and keep care running.

- Security assessments for hospitals and practices
- Medical device and app security testing
- Managed monitoring with Zyberdome

## FAQ

**What is the difference between a vulnerability scan and a penetration test?**

A vulnerability scan automatically checks systems for known weaknesses. A penetration test goes further: experienced testers combine and exploit weaknesses manually to show what an attacker could really achieve, and prioritise the findings by business risk.

**Does my company fall under NIS2?**

NIS2 generally applies to medium-sized and large companies (from 50 employees or more than €10 million turnover) in 18 sectors, including manufacturing, healthcare, energy, transport and digital services, as well as some smaller entities with critical roles. Affected companies must implement risk-management measures and report significant incidents.

**How often should we run a penetration test?**

At least once a year and after significant changes, such as new applications, cloud migrations or major infrastructure changes.

---
Zyberum GmbH. Canonical page: https://zyberum.com/it-security