Security audit
Penetration testing, configurations, email, access and backups: we test your information system the way an attacker would, then hand you a clear action plan.
A team on watch
Attacks now target businesses of every size, with booby-trapped emails that look perfectly genuine. Our engineers monitor your domains, your email, your workstations and your servers around the clock, and respond to every alert with method.
A domain imitating yours has just been registered to deceive your customers.
We spot it the moment it is registered, alert you and start the takedown process with the registry and the hosting provider.
An employee entered their password on a fake login page.
We close their sessions, renew their credentials and check that no forwarding rule has been set up on their mailbox.
A laptop has been lost or stolen.
Its access is revoked and its data wiped remotely; its encrypted drive stays unreadable.
A critical vulnerability is published for software you use.
We identify the workstations and servers affected, deploy the patch as a priority and report back to you.
What we audit
We attack your websites, your applications and your remote access using attackers' methods, within a framework agreed with you.
Domains, subdomains, internet-facing services and certificates: everything an attacker can see of you, inventoried.
Domain authentication, filtering, forwarding rules and phishing resilience, checked one by one.
Passwords, two-factor authentication, privileged accounts and contractor access, reviewed in detail.
Patches, encryption, antivirus, configurations and outdated software, recorded on every machine.
We verify that your data truly restores, and how long it takes.
A simulated phishing campaign and interviews, to measure your teams' reflexes.
Your practices measured against data protection requirements and the standards of your sector.
Certified reviews
Every review is certified by Markleex: its author is a real organisation, with a website you can visit.
They are very reliable, fast and professional. Their work is flawless. This is a good team. Our thanks to them!
Translated. Original language: Hungarian
Kötegyáni Önkéntes Tűzoltó Egyesület · Hungarian
Nagyon megbízthatóak, gyorsak és szakszerűek. A munkájuk kifogástalan. Ez egy jó csapat. Köszönet Nekik!
[…] We particularly appreciated their availability, their attentiveness, their advice and their support throughout our process. […]
Translated. Original language: French
Nou Tout’ Enpòwtan · French
[…] Nous avons particulièrement apprécié leur disponibilité, leur écoute, leurs conseils et leur accompagnement dans nos démarches. […]
We can't thank the Simafri team enough for the excellent work they did. It's a privilege to be able to count on them.
Translated. Original language: Brazilian Portuguese
Associação SNA Brasil · Brazilian Portuguese
Não temos como agradecer pelo excelente trabalho realizado pela equipe da Simafri. é um privilégio poder contar com eles.
[…] From our very first conversations through to the launch, the team were attentive, always available and quick to act on our feedback. The quality of their work and their attention to detail show on every page of our new website. […]
Simafri built a beautiful site! They were very helpful with transferring the domain name. Very good and fast communication, both via WhatsApp and email.
Translated. Original language: Dutch
Stichting Fruitful Tree Foundation · Dutch
Simafri heeft een prachtige site gebouwd! Ze hielpen ons heel goed bij het verhuizen van de domeinnaam. Heel goed en snel contact, zowel via WhatsApp als email.
[…] we have an elegant and functional website that presents our activities and keeps a record of them. […] We also remain impressed by the speed of their interventions, which are always almost instantaneous. […]
Translated. Original language: French
Emeis-Ensemble · French
[…] nous disposons d’un site élégant et fonctionnel qui présente nos activités et en conserve les traces. […] Nous restons également impressionnés par la rapidité des interventions, qui sont toujours quasi instantanées. […]
How the audit unfolds
Together we define the scope, the schedule and the rules of engagement for the penetration test.
Our engineers analyse, test and document every weakness, with proof of how it can be exploited.
You receive an executive summary, a detailed technical report and an action plan ranked by priority, presented to your teams.
Our cybersecurity services
Continuous monitoring, authenticated email, lookalike domain watch and incident response.
Explore managed cybersecurityPenetration testing and a full review of your information system, with a prioritised action plan.
You are hereWorkstations, servers, phones and an encrypted private network, managed and secured by our engineers.
Explore IT fleet managementFrequently asked questions
From a few days to a few weeks, depending on the scope. The schedule is set during scoping, and tests are planned to keep your business running smoothly.
Tests take place within a written framework, at times agreed with you. The most sensitive trials are run outside production hours or on a staging environment.
An executive summary that ranks risks by severity; a technical report that describes each weakness, its proof and its fix; and a dated action plan.
Yes. Our engineers carry out the action plan, then run a follow-up audit to confirm that every weakness is fixed. Protection then continues with our managed cybersecurity.
Yes. The audit is covered by a confidentiality agreement signed before the first test, and the material collected is encrypted, then destroyed at the end of the engagement.
On a quote basis, according to the scope defined during scoping: websites, applications, workstations, servers and interviews.
Tell us about your business and your IT: we will propose the assessment, audit or managed service that suits you.
Security audit
Let's talk about your audit
Tell us what you need in a few words: we will get back to you quickly.
Thank you! Your request has been sent. We'll get back to you shortly.
Prefer email? Write to us at support@simafri.com.