Penetration testing
We attack your systems the way an intruder would, with your written consent: web applications, internet-facing services, internal network and Active Directory. You learn what breaks, and how to fix it.
Penetration testing, detection, training and compliance for Swiss companies. Concrete findings, prioritised fixes, and follow-up that does not stop at the report.
Based in the canton of Vaud, Switzerland. Engagements in French and English.
Start from your situation: each need leads to the service that addresses it.
Six services, grouped by what you need: know where you stand, see what is happening, make your teams vigilant and stay on course over time.
We attack your systems the way an intruder would, with your written consent: web applications, internet-facing services, internal network and Active Directory. You learn what breaks, and how to fix it.
Your AI tools, data and access reviewed: what is exposed, what could leak, what must change first.
Know when something unusual happens in your environment. We set up log collection and alerts tuned to your systems, without drowning your team in noise, then hand them over to your IT team.
Practical workshops for your staff: passwords and two-factor authentication, email and phone scams, safe use of AI, the right reflexes during an incident. Simulated phishing campaigns measure your teams’ vigilance and their progress over time.
A security lead a few days a month: priorities, internal policies, vendor choices, what to do during an incident.
Records of processing, impact assessments, AI-related obligations: what the law requires, turned into concrete actions.
Whatever the service, you get a clear reading: what holds, what does not, and what to fix first. Gaps are flagged in red and ranked by real impact, not by volume.
Fictional example, not related to any real client.
Thirty minutes, no commitment: your business, your tools, what concerns you.
A clear scope and a fixed price agreed in advance, before any work starts.
Testing, audit, implementation or support, as agreed.
Readable results, an action plan, and follow-up if you wish.
Kavalis builds on an entirely Swiss track: federal VET diploma in IT (CFC), Swiss baccalaureate, then the Federal Diploma of Higher Education as Cyber Security Specialist. Eight years in IT, three and a half of them in security, in sectors where security is not negotiable: from firewalls to web application protection, from incident detection to ISO 27001 governance.
Our approach: help companies protect themselves and use AI without opening gaps or stepping outside the law. No eighty-page report, but an honest assessment and support sized to your company. Our clients’ data stays in Switzerland.
The name “Kavalis” comes from the Tamil kaaval: guard, protection. The method is Swiss: precise, sober and reliable.
Years in the field within the IT and security teams of large Swiss organisations, in three sectors with demanding security and confidentiality requirements.
Describe your context in a few lines. We reply within 2 business days.
Prefer email? contact@kavalis.ch