Do you need an independent assessment of a security issue, design or technical decision, but not a full audit or penetration test?
A security consultation is suitable when you have a specific question and need an expert second opinion. This may involve the security of a product, application or infrastructure, reviewing access permissions, threat modelingA simple plan that says what you protect, from whom, and how an attack could happen. More or evaluating a proposed technical solution.
I can help you understand the relevant risks, assess your options and decide what to do next.
Briefly describe the issue and what you need to decide. We will agree on the scope and schedule of the consultation.
What can I help you with?
- Security assessment of a product, application or infrastructure design.
- Threat modelingA simple plan that says what you protect, from whom, and how an attack could happen. More – identifying potential attack paths and weaknesses in a design.
- An independent second opinion on a security solution or technical decision.
- Consultation on a specific issue involving an application, infrastructure or operations.
- Tuning security detection agents and similar tools.
What will you get from the consultation?
The goal is to reach a concrete conclusion or recommendation that supports your next decision. We can discuss available options, relevant risks and anything that may require further verification.
The form of the outcome depends on the agreed scope. A consultation does not automatically include systematic testing or a formal audit report.
How does the consultation work?
We first clarify the problem, the expected outcome and any relevant materials. Depending on the topic, the consultation may take place over a video call, in person or through work on a specific design, configuration or technical issue.
The aim is not to create an unnecessarily long process, but to focus on what you actually need to resolve.
The price is CZK 3,500 per hour, with a minimum of 1 hour.
When is a consultation not the right service?
If you need systematic testing of a web application, server or broader environment, a Web Application Security ReviewA practical review of a web app focused on common flaws, login, permissions, sessions, and data hand... More, Custom Penetration Test, Infrastructure Audit or another appropriate service is a better fit.
A consultation does not replace an audit or penetration test. If the initial discussion shows that a different scope is needed, we can agree on a more suitable approach.
How I approach the work
- Recommendations are based on your specific situation, not a generic checklist.
- I do not recommend software or hardware because I receive a commission from its sale.
- I will not push you to change technologies simply because I personally prefer something else.
- If you need to enter a passwordIn general, a password is an arbitrary string of characters including letters, digits, or other symb... More or other sensitive information, you enter it yourself.
- If I do not know something, or there is not enough information to give a reliable answer, I will say so.
- I explain technical issues clearly and in as much detail as the situation requires.
Consultations for individuals
Security consultations are also available to individuals. We can discuss account security, MFAVícefázové ověření (též vícefaktorové, anglicky multi-factor authentication) je v informatice proces... More, password managersAn app that securely stores passwords and helps create a different strong password for every account... More, device security, privacy, digital footprint or personal OPSECOperational security: habits that reduce how much sensitive information you reveal about yourself an... More.
Contact
If you are interested in a security consultation, contact me using the form below, by email at info@zaskolit.cz, or by phone at +420 776 636 110. Signal can also be used.