FOR BUSINESSES. FOR INDIVIDUALS. FOR PEACE OF MIND.

Security,
clearly understood.

Know where you stand.
Know what to do next.

We find weaknesses, test how well your security holds up and look inside the software you rely on. You get clear findings and practical advice, without needing to speak security.

Prefer a conversation? mail@tsigedegraaf.com

01 / WHAT WE CAN HELP WITH

The right test.
For the right question.

Start with what you want to understand. We help choose the right approach and can combine services into one clearly defined assessment.

01 / FIND

Vulnerability
scanning.

“Are there known security problems in what I use?”

A scanner checks the websites or systems we agree on for known weaknesses. Where relevant, results are linked to CVEs: public reference numbers for disclosed security vulnerabilities.

We review the results and explain which findings need attention or further investigation.

  • Check for known vulnerabilities
  • Understand relevance and priority
  • Get recommended next steps
WHAT YOU RECEIVE

A findings summary with affected items, relevant CVE references and clear recommendations.

How is this different from a pentest?+

A scan is a structured way to look for known issues. A pentest adds hands-on investigation to explore how weaknesses might be used together and what their impact could be.

02 / TEST

Penetration
testing.

“Could someone actually get past our security?”

A penetration test, or pentest, is a hands-on security assessment. We examine the agreed website, application or system and test how its security behaves in realistic situations.

The work goes beyond a list of alerts to explain how an issue could affect you.

  • Investigate weaknesses in context
  • Explore realistic attack paths
  • Prioritize practical improvements
WHAT YOU RECEIVE

A report with supporting evidence, an explanation of the impact and a prioritized action plan.

What is included in the test?+

We agree the targets, access, boundaries, timing and depth before starting. Your proposal explains what is included and which areas are outside the assessment.

03 / UNDERSTAND

Reverse
engineering.

“What is this app really doing under the surface?”

We look inside compiled software to understand how it works. For Android and iOS apps, this can include how information is stored, which services it connects to and how key features behave.

This is useful when the source code is unavailable or a specific behavior needs explaining.

  • Examine app components and logic
  • Follow data and network behavior
  • Investigate a specific concern
WHAT YOU RECEIVE

An explanation of observed behavior, supporting evidence and recommended follow-up work.

Can this be combined with a pentest?+

Yes. Looking inside an app can help guide a pentest. We can also combine vulnerability scanning, app analysis and technical advice within one agreed scope.

Explore app analysis

Not sure which one you need? Describe the question. We’ll help define a sensible first step.

Help me choose

02 / LOOK BENEATH THE SURFACE

A closer look.
Inside your software.

Choose a platform and let the vulture turn it inside out. A small illustration of a serious task: understanding what an application contains and does.

Choose a platform to see the illustration.

ANDROID REVERSE ENGINEERING

Beyond the app icon.

An Android app is more than its screens. We examine the package and its behavior to help answer questions about its data, components and connections.

01

What is inside?

Understand the app’s included components, code and configuration.

02

Where does data go?

Explore permissions, stored information and communication with online services.

03

What happens when it runs?

Observe relevant behavior and investigate the question you want answered.

For your technical team +

APK, DEX, native ELF libraries, permissions, exported components and targeted static and dynamic analysis. Exact coverage depends on the agreed scope and available access.

The animation is an illustration. Your app is reviewed as a separately agreed engagement.

03 / BETTER TOGETHER

One question.
More than one angle.

A scan can point to an issue. A pentest can explore its impact. Reverse engineering can reveal why an app behaves the way it does.

Combine the services you need in one scope, with one clear set of findings and next steps.

Build your assessment
01

Discover

Find relevant known weaknesses.

02

Validate

Investigate what they could mean in practice.

03

Understand

Look inside the software when the question calls for it.

ONE CLEAR REPORT Priorities. Evidence. Next steps.

04 / HOW IT WORKS

Clear from the start.
Useful at the finish.

No need to arrive with a technical brief. Tell us what you want to understand and we’ll work through the details together.

01

Tell us the question.

Share the website, app or software you want checked and the concern behind your request.

02

Agree the scope.

We confirm the targets, access, timing, work included and price before starting.

03

Get a clear answer.

Receive findings with evidence, a plain-language explanation and practical recommendations.

05 / START WITH A DEFINED SCOPE

A full test.
Or a focused trial.

Start with a small, agreed sample or request a broader assessment. Select one service or combine several.

What does a trial include?

An agreed selection of checks for a limited scope, a short findings summary and a discussion of the next step. The exact checks, number of targets, timing and any cost are confirmed before work begins.

A useful starting point

  • The website, domain, app or software name
  • How many targets you want included
  • What you want to find out
  • Whether test access is available

Don’t include passwords or confidential files in the first message.

Rather talk it through?mail@tsigedegraaf.com
YOUR REQUEST

Tell us a little. We’ll help with the rest.

What would you like to request?
Choose your services (you can combine them)

List the proposed targets. For an app, include its platform or a store link if you have one.

This prepares an email to mail@tsigedegraaf.com. It is a request to discuss the work; the scope and start date are agreed together.

A FEW PRACTICAL QUESTIONS

Good questions.
Clear answers.

Is this for businesses and private individuals?+

Both. You can bring us a business application, your own software or a question about an app you use. We discuss what can usefully be assessed and what access is needed.

What is a CVE?+

A CVE is a public identifier for a disclosed security vulnerability. It helps different tools and people refer to the same issue. A scan result still needs context: the version, configuration and exposure determine whether the issue affects your target. Read the CVE glossary ↗

Do I need to understand all the technical terms?+

No. Tell us the question in your own words. We explain what we propose to check, what the findings mean and what you can do next. Supporting technical detail can be shared with your IT provider or developer.

Can all three services be combined?+

Yes. We can combine scanning, a pentest and software analysis when they help answer the same question. The proposal sets out each part and the final deliverables.

Will the trial automatically start a scan?+

No. Your request starts a conversation. We confirm the targets, test access, boundaries, timing and any cost with you before carrying out the agreed work.

What will it cost?+

That depends on the scope and depth of the work. A limited trial and a full assessment involve different amounts of investigation. We agree the price and deliverables before getting started.

LET’S START WITH YOUR QUESTION

Good security starts
with a conversation.

No technical brief needed. Tell us what you want to understand.

mail@tsigedegraaf.com ↗Request a test or trial
Email usRequest a test