STANDARDS & COMPLIANCE
Reporting mapped to ISO 27001, PCI-DSS and OJK requirements.
Testing follows PTES, OWASP ASVS, MITRE ATT&CK and NIST SP 800-115. Reporting is written so it can go straight into an ISO 27001, PCI-DSS or OJK review, in English or Bahasa Indonesia.
The standards we work to, and the evidence we hand over.
Every standard and framework here is one our engagements are measured against. Scope and evidence for each are confirmed in writing at scoping.
What every report is written against. And how your evidence is handled.
The same four facts follow every engagement: the standards the reporting satisfies, the methodologies the testing follows, how your evidence is handled, and where we work.
PTES · OWASP ASVS
MITRE ATT&CK · NIST SP 800-115
NDA first · encrypted in transit and at rest · evidence destroyed on the retention schedule in your contract · PGP available
Indonesia · ASEAN · remote and onsite engagements · reporting in EN / ID
NEXT STEP
Talk to an operator, not a sales desk.
A short scoping call, then scope, schedule and cost in writing within 2 working days.