snapSEC Consulting
Security consulting: test before attackers do.
Penetration testing, red teaming, social engineering and cloud assessments, scoped to your environment and tested by hand. We can also run your SIEM platform based on Elastic.
snapSEC Consulting is the consulting practice of snapSEC GmbH from Vorchdorf in Upper Austria. We simulate attacks, test networks, applications, Active Directory and the Microsoft cloud, and operate SIEM platforms based on Elastic. Companies in Austria, Germany and Switzerland find out where they really stand and receive prioritised results plus a workshop to agree the next steps.
Test plan
Planning- Scoping
- Planning Current step
- Testing
- Report
- Remediation
Services
Our services, one goal: less risk
From targeted testing to day-to-day operations. Each service stands on its own and can be combined with the others.
Attack simulation
Penetration testing
Networks, web applications and APIs, Active Directory and cloud or hybrid environments, tested manually.
Attack simulation
Red teaming
A realistic attack with a defined goal shows whether detection and response hold up when it matters.
Attack simulation
Social engineering
Spear-phishing simulations and media drop tests measure how your organisation responds to deception.
Cloud and identity
Cloud security assessment
Microsoft 365 and Azure checked for misconfigurations, excessive permissions and attack paths.
Security operations
Managed SIEM & data lake
We run, maintain and harden your SIEM platform based on Elastic. Your team keeps control of the use cases.
At a glance
Consulting- Services
- Penetration testing, red teaming, social engineering, cloud security assessment, managed SIEM & data lake
- Team
- Our team brings more than 20 years of experience in IT security.
- Approach
- Individually agreed scope instead of standard packages; manual testing plus tools and our own scripting
- Provider and region
- snapSEC GmbH, Vorchdorf (Austria), for companies in Austria, Germany and Switzerland
Not sure where to start? The decision guide matches typical situations to the right service.
Which service fits?Decision guide
Which service is the right fit?
Start with your situation. The table shows where we would begin and what could be added or considered instead.
| Your situation | Our recommendation | Add-on or alternative |
|---|---|---|
| We need a pentest before go-live, for an audit or for our cyber insurer. | Penetration testing | blacklens.ioPenetration testing as a service (PTaaS) with retests right in the platform |
| We want to know whether our SOC would detect a real attack. | Red teaming | ACDC24/7 detection by the managed SOC, with purple teaming as an extension |
| We want to know how our staff respond to phishing. | Social engineering | Red teamingWhen phishing should only be the way into a larger attack |
| Our Microsoft 365 and Entra configuration has grown and become hard to oversee. | Cloud security assessment | blacklens.ioOngoing control of vulnerabilities, including the cloud |
| We have our own security team but no time to run the SIEM. | Managed SIEM & data lake | ACDCWhen you also need 24/7 analysis and response |
| We need someone who responds to attacks around the clock. | ACDC | Managed SIEM & data lakeAs an alternative if your own team runs detection |
| We don't know what is visible from outside or what the dark web holds about us. | blacklens.io | Penetration testingManual testing of the critical systems |
| NIS2 applies to us. What do we need to do technically? | NIS2 | Penetration testingTo evaluate how effective the measures are |
How we work
Five steps from first call to result
Every project is different, the process stays dependable. You always know where we stand and what comes next.
No obligation
First call and scoping
We clarify goal, environment and constraints and agree the scope individually. We don't sell standard packages.
Mon–Fri 07:00–17:00
Planning with your team
We agree timing, contacts and rules of engagement closely with your team. Work outside normal hours by arrangement.
Manual and targeted
Execution
Manual testing combined with tools and our own scripting, with an eye on current threats and the risks of your industry.
Prioritised
Report and workshop
You receive a risk rating and specific recommendations for every finding. In the workshop we go through the results together.
Optional
Remediation
If you wish, we support you with the hardening measures. For ongoing control there are blacklens.io and ACDC.
Under our terms and conditions
- Normal working hours
- Mon–Fri, 07:00–17:00, outside by arrangement
- Invoicing
- 35% when the order is placed, the rest after acceptance
- Confidentiality
- Business secrets protected and GDPR observed, even after the contract ends
FAQ
Frequently asked questions about consulting
How does a consulting engagement with snapSEC work?
An engagement runs in five steps: first call and scoping, planning with your team, execution, report and workshop, and optional support with remediation. During scoping we agree the goal and scope individually, then you receive a quote. Timing, contacts and rules of engagement are settled before we start, so your operations keep running predictably.
Do you offer standard packages or fixed prices?
No. Every service starts with an individually agreed scope, which is why there are no fixed prices and no public price list. The effort depends on the number and complexity of systems, the goal and the approach you want. After the first call you receive a quote that describes exactly that scope. That way you pay for the test you need, not for a package that only roughly fits.
How is the work invoiced?
Invoicing follows our general terms and conditions: for project services we issue a partial invoice of 35% of the total when the order is placed, and the rest after acceptance. Agreed hourly or daily rates apply to normal working hours, Monday to Friday, 07:00 to 17:00. Work outside these hours is agreed with you in advance and carries the surcharges set out in the terms.
Can tests take place in the evening or at weekends?
Yes, by arrangement with you. This makes sense when critical systems must not be disturbed during the day, or when a test should deliberately run outside business hours. Our normal working hours are Monday to Friday, 07:00 to 17:00. Work outside these hours carries the surcharges set out in our terms. We agree the right window together during planning.
How do you keep our data and results confidential?
Confidentiality is part of the contract: under our terms both parties undertake to protect each other's business and trade secrets and to comply with the Austrian Data Protection Act and the GDPR, even after the contract ends. Your name only appears as a reference if we agree that separately. If we bring in specialists from other companies, you can ask for details of the person, their qualifications and the extent of their work at any time.
How does consulting differ from blacklens.io and ACDC?
Consulting covers targeted projects with a report and workshop, plus operating your SIEM platform. blacklens.io is the platform of snapSEC GmbH that continuously monitors your attack surface, vulnerabilities and dark web findings. ACDC – Active Cyber Defense Center is a managed SOC for round-the-clock monitoring, operated by Active Cyber Defense Center Service GmbH. The three complement each other and can be combined.
Which companies does snapSEC Consulting work for?
snapSEC Consulting works exclusively for companies and organisations of all sizes in Austria, Germany and Switzerland. The scope follows your environment, not a size category: a web portal before go-live can be tested just as well as an Active Directory that has grown over years across several sites. We work out what makes sense for you in the first call.
Read on
Related services
First conversation
Where should we start?
Describe your situation. We will recommend the right service, even if it is a smaller step than you expected.
Destination: snapSEC, Vorchdorf
Asamerstraße 1b
4655 Vorchdorf, Austria 47°59′ N · 13°55′ E
Personal, without obligation and confidential.