We map all your doors.
Website, email, cloud, computers, AI assistants, subcontractors: everything an attacker can reach from outside.
Cybersecurity for small and mid-sized businesses · offensive auditCybersecurity for small and mid-sized businesses · continuous protection
We play the burglar, with your written consent: we try to get in through your website, your email, your accounts and your AI tools. You receive the list of open doors, and how to close them.
We play the guard: we close the doors, we check every month and we warn you at the first signal. A simple subscription, designed for a business with no security team.
Red or Blue, in plain words
Two jobs, one goal: that nobody else gets into your company. The difference between Red Team and Blue Team, explained to a business owner.
Like a burglar, but with your written consent and without breaking anything.
Like a guard: we close, we check, we warn you.
Sample scenario
This is how a small business gets brought to a halt, step by step. Scroll down.
The same attack, against a protected company. Scroll down.
An invoice, a sender who looks like a colleague. One letter has been changed in the address. Nobody notices.
The address imitates yours, one letter apart. The email is flagged as suspicious and its link is disabled.
The link opens a copy of your login page. The password typed in reaches the attacker.
Even if someone clicks, the copy of your login page does not open. The attempt is reported.
Without two-factor authentication, the password is enough. They log in as administrator and copy your client files.
The login asks for confirmation on the phone. You answer no, access is refused.
The files are encrypted, the website goes down, clients call. The Red Team replays this scenario in your company, without the damage, to show you where it breaks.
The website stays online and the backups are ready. You receive a summary every month.
Calculator
A simple sum, on your own figures. Nothing is sent.
Calculation: annual revenue ÷ 220 working days × days of downtime. Excluding recovery work, lost clients and reputation.
An engagement, from start to finish
Demo screens, with sample data. What you see is the shape of what you will receive.
Website, email, cloud, computers, AI assistants, subcontractors: everything an attacker can reach from outside.
Each step follows the scope of the contract. We stop at the proof: never any damage, never any data taken away.
Access, backups, updates, AI tools: each weak point is closed, then checked.
A summary for management, then each flaw with its proof, its severity and its fix. No needless jargon.
| Ref. | Finding | Severity | Fix |
|---|
Three flaws make it possible to enter the client area without a valid password. They can be fixed in a few days and must come before everything else.
3 critical · 5 high · 6 medium · 3 low
Fixed flaws stay fixed. Every month, we check, alert and tighten.
Illustrative preview · demo figures · the grid shows the intensity of the checks, not a real record.
What we cover
Each area can be attacked by the Red Team, defended by the Blue Team, or both.
Red Team plans · one-off engagementBlue Team plans · monthly subscription
EUR490
What an attacker sees of you from the internet.
EUR1,490
In-depth test of the website, the accounts and the infrastructure.
EUR3,900
The full audit, extended to your AI assistants and agents.
EUR99/ month
The basics monitored every month.
EUR290/ month
Hardening and regular follow-up of your security.
EUR690/ month
Protection, extended to your AI tools.
Every offensive test starts after an authorisation contract has been signed, setting the scope and the dates. Prices excluding tax. What drives the price of a penetration test and how it runs.
Monthly subscription, prices excluding tax. The exact scope is confirmed in writing before the start.
Ryze Systems
Ryze Systems builds custom business software for small and mid-sized businesses, with data hosted in Europe and role-based access. Ryze Cyber can audit it before it goes live.
Method
You know at every moment what is being tested, by whom, and within which framework.
Together we define what is tested and what is not.
No test without a written contract: scope, dates, people to alert.
We look for the flaws without interrupting your business.
Each flaw is explained, ranked by severity, with its fix.
A conversation to go through everything and decide on priorities.
Free scan
An indicative self-assessment, calculated from your answers. It is not an audit: nothing is tested on your systems. What the free scan measures and what a penetration test shows on top.
Frequently asked questions
Yes, provided you are the one asking, for systems that belong to you, and an authorisation contract is signed beforehand. We never test a third-party system without the written consent of its owner.
The dates and the limits are agreed with you in the contract. Tests that put availability at risk are excluded by default and are only carried out on explicit request.
The free scan is a questionnaire: it gives a first idea based on your answers. An audit is a real engagement, in which we test your systems within a signed framework.
An AI assistant or agent connected to your data can be manipulated into revealing information or acting on your behalf. It is a new entry point that conventional audits do not always cover.
If you do not know where you stand, start with a Red Team audit. If you already know your weaknesses, the Blue Team fixes them and keeps the level.
The scan is free, with no commitment, and the result appears straight away.
Guides
Nine short guides, with the official sources.