Information security services
The team that builds Dozor runs penetration tests, investigates incidents and builds company defences. We work under contract in Almaty and across Kazakhstan, in Kazakh, Russian and English.
Penetration testing
External and internal penetration tests in black, grey and white box models.
Web applications and APIs
Security assessment of websites, customer portals, APIs and mobile apps against OWASP.
Incident response
Response to an attack, forensics of servers and workstations, a report for management.
SOC build-out
Your own monitoring centre on Dozor: sources, rules, playbooks, procedures and shift training.
Virtual CISO
A head of security under contract: strategy, policies, budget and reports to management.
Security implementation
Security processes and tools, including free open source solutions.
Audit and compliance
Security audits, legal requirements of Kazakhstan, preparation for ISO/IEC 27001 and PCI DSS.
Staff training
Cyber hygiene training and simulated phishing campaigns with a report by department.
Photos: Lacz02, CC BY-SA 4.0; Sai Kiran Anagani, CC0; Alchemist-hp, CC BY-SA 3.0; NASA Johnson Space Center, public domain; Igors Jefimovs, CC BY 3.0; BrokenSphere, CC BY-SA 3.0; Samuel Zeller, CC0; AntanO, CC BY-SA 4.0, Wikimedia Commons.
How we work
- 01
Contract
We start with a contract and a non-disclosure agreement. The scope of work and the permissions are put in writing.
- 02
Scope
Goals, systems, timing and emergency contacts are agreed before the work starts.
- 03
Work
We keep you updated as the work goes and report critical findings at once.
- 04
Report
We hand over a management report and a technical report with evidence and recommendations.
Why us
- Our own product
- We build the Dozor platform. Penetration tests and investigations are run by the same people who write its attack detection rules.
- Practice
- Penetration tests, incident investigations and SOC build-outs in companies from different industries.
- Kazakhstan
- We work in Almaty and across Kazakhstan, follow local law and speak three languages.
- A clear report
- A finding comes with evidence, a risk rating and a specific fix.
Discuss your task
Describe the task and the timeline. We will reply, clarify the scope and propose a plan.
- Contract. We start with a contract and a non-disclosure agreement. The scope of work and the permissions are put in writing.
- Scope. Goals, systems, timing and emergency contacts are agreed before the work starts.
- Work. We keep you updated as the work goes and report critical findings at once.
- Report. We hand over a management report and a technical report with evidence and recommendations.
Or write to us: info@dozorsecurity.kz