DE Emergency Arrange a conversation

Nova Defense

Detecting is not defending.

We actively defend your environment, at the network, system and application layer, and automate the response.

Schedule a call Where do we stand?

Typical starting points

  • „A major customer wants to see our security concept. By the end of the quarter.“
  • „Our SIEM flags something every night. Nobody acts on it.“
  • „We fall under NIS2, and I'm personally liable. I don't know if we're compliant.“
  • „We have a certificate. Whether we'd survive an attack, nobody knows.“

What Nova Defense does for you

Detection tells you something is happening. Defense intervenes. We look at how an attacker would move through your environment: over the network, through a system, through an application. Then we implement the measures that stop them, and make sure an alert is followed by an action.

Every measure is documented. When someone asks, you have the answer in writing. And you have a CISO who represents your security to management, regulators and auditors.

Where models help with the analysis, the request runs through Nova Gate: sensitive data is detected and masked on your side, and the model answers on your own hardware or in the cloud. Zero retention applies either way.

We implement it ourselves.

We implement the measures in your environment and stay on them until they work.

Provable to anyone who asks.

Regulator, customer, insurer, auditor: for every measure, you can show the evidence.

A CISO who represents you.

They report to management and answer for your security to regulators and auditors.

What we do

From attack surface to proof.

Every measure runs through the same chain. It starts with how someone gets in; it ends with a record you can present.

  1. Attack surface

    Where does someone get in, and what can they reach from there?

  2. Measure

    What needs to be done, in what order, at what effort?

  3. Implementation

    We implement, in your environment, without disrupting your operations.

  4. Proof

    Every measure is documented and auditable.

  5. Report

    To management and regulators, clear and defensible.

From practice

Aviation, critical infrastructure

First attacked, then detection rebuilt.

We first examined the environment from an attacker's perspective and derived scenarios for how targeted attackers actually operate in aviation. On that basis, we accompanied the move to a new endpoint and server detection platform, wrote the test cases, automated the checks and connected everything to central security monitoring. Detection was not assumed. It was tested against real attack techniques.

2023 to 2024
duration of the engagement
APT
scenarios from real attack patterns
automated
testing of detection rules

How we start

  1. up to two weeks

    Assessment

    We look at where you stand and which requirements apply to you. You get a written report that belongs to you.

  2. Action plan

    What comes first, what it costs, and what it delivers. You decide what we implement.

  3. Implementation and representation

    We implement and document. Your CISO reports regularly to management and stands by your side during audits.

What it costs

from €4,000

a month

The price depends on the size of the environment, the scope of monitoring and how far the response should run automatically. Individual pieces of work, such as a penetration test, are billed separately.

All prices are net and exclude VAT. Our offers are addressed to businesses only.

For your IT

Frameworks, scope and approach in detail

NIS2, ISO 27001, TISAX, DORA, IEC 62443, and industry-specific requirements such as the KRITIS regulation, EnWG section 5c, GMP Annex 11, and the requirements for holders of professional secrecy obligations.

Zoning and segmentation, hardening of servers, network and firewalls, separation of IT and OT.

Identity and access management, privileged access with a four-eyes principle, secure remote access.

Securing email (SPF, DKIM, DMARC, MTA-STS), web proxies and content filtering.

Architecture reviews, penetration tests and red-team exercises with prioritized findings.

Emergency plans, recovery plans and documented procedures. Response during an actual incident runs through Nova Run.

We implement with the products already in use at your site, among others Cisco, Check Point, Palo Alto Networks, Fortinet, Microsoft, Okta and CyberArk.

Full overview on the technology page

If your customer, your industry or a tender requires it, we get you there. We'll also tell you openly what a certificate does and doesn't prove: it shows that measures exist. We make sure they actually work.

You decide. Our CISO can take on the role fully or support your own. Either way, they represent your security to management, regulators and auditors.

No. We implement the measures with what you already have in place. If we think something isn't suitable, we say so and explain why. The decision stays with you.

Nova Defense hardens your environment, automates the defense and documents every measure. Around-the-clock monitoring and response during an incident are handled by Nova Run. The two can be combined, but don't have to be.

They belong to you. Documentation, action plans and evidence stay with you and remain valid, even without us.

Nova Defense hardens your environment, automates the defense and documents every measure. Around-the-clock monitoring and response during an incident are handled by Nova Run. For automating business processes, there is Nova Change.

The next alert is followed by an action.

30 minutes. You tell us which requirements are coming your way, and we tell you openly what to do first.

hallo@dynexo.de · Schedule a call