Skip to content
Kavalis

What matters deserves to be guarded.

Penetration testing, detection, training and compliance for Swiss companies. Concrete findings, prioritised fixes, and follow-up that does not stop at the report.

Based in the canton of Vaud, Switzerland. Engagements in French and English.

La sentinelle Kavalis

Where to start?

Start from your situation: each need leads to the service that addresses it.

What we do for you

Six services, grouped by what you need: know where you stand, see what is happening, make your teams vigilant and stay on course over time.

Assess Know where you stand

Penetration testing

We attack your systems the way an intruder would, with your written consent: web applications, internet-facing services, internal network and Active Directory. You learn what breaks, and how to fix it.

You receiveA technical report and a management summary, vulnerabilities ranked by severity with their fixes, and a retest once remediated.Discuss

AI security audit

Your AI tools, data and access reviewed: what is exposed, what could leak, what must change first.

You receiveA security posture review, a prioritised report and an action plan.Discuss

Detect See what is happening

Logging and detection

Know when something unusual happens in your environment. We set up log collection and alerts tuned to your systems, without drowning your team in noise, then hand them over to your IT team.

You receiveA configured platform, tuned alert rules and a playbook for each alert.Discuss

Train Make your teams vigilant

Training and awareness

Practical workshops for your staff: passwords and two-factor authentication, email and phone scams, safe use of AI, the right reflexes during an incident. Simulated phishing campaigns measure your teams’ vigilance and their progress over time.

You receiveTailored workshops, on site or remote, reusable materials and an anonymised campaign report.Discuss

Lead Stay on course over time

Fractional vCISO

A security lead a few days a month: priorities, internal policies, vendor choices, what to do during an incident.

You receiveA roadmap, a quarterly review and a direct contact.Discuss

nFADP and AI Act compliance

Records of processing, impact assessments, AI-related obligations: what the law requires, turned into concrete actions.

You receiveThe required documentation and the list of measures to implement.Discuss

Results your management understands

Whatever the service, you get a clear reading: what holds, what does not, and what to fix first. Gaps are flagged in red and ranked by real impact, not by volume.

Security dashboardExample
Web applications
2 critical
Access and identities
6 / 10
Detection coverage
40%
Use of AI
1 gap
nFADP compliance
9 / 10
Priority 1: fix the two critical flaws in the client portal

Fictional example, not related to any real client.

How we work

  1. First conversation

    Thirty minutes, no commitment: your business, your tools, what concerns you.

  2. Proposal

    A clear scope and a fixed price agreed in advance, before any work starts.

  3. Engagement

    Testing, audit, implementation or support, as agreed.

  4. Report and follow-up

    Readable results, an action plan, and follow-up if you wish.

Swiss expertise, no middlemen

Kavalis builds on an entirely Swiss track: federal VET diploma in IT (CFC), Swiss baccalaureate, then the Federal Diploma of Higher Education as Cyber Security Specialist. Eight years in IT, three and a half of them in security, in sectors where security is not negotiable: from firewalls to web application protection, from incident detection to ISO 27001 governance.

Our approach: help companies protect themselves and use AI without opening gaps or stepping outside the law. No eighty-page report, but an honest assessment and support sized to your company. Our clients’ data stays in Switzerland.

The name “Kavalis” comes from the Tamil kaaval: guard, protection. The method is Swiss: precise, sober and reliable.

  • Cyber Security SpecialistFederal Diploma of Higher Education
  • IT Specialist (CFC)Federal VET Diploma
  • Swiss baccalaureateMaturité gymnasiale
  • CompTIA Security+Certification
  • Vendor certificationsDetails on request

Experience gained from the inside

Years in the field within the IT and security teams of large Swiss organisations, in three sectors with demanding security and confidentiality requirements.

  • HealthcareSecurity of hospital and medical environments: patient data, critical systems, continuity of care.
  • Banking and financeProtection of regulated banking infrastructure, strict controls, zero tolerance for incidents.
  • WatchmakingApplication security in the watch industry: know-how, intellectual property and brand image.

Let’s talk about your situation

Describe your context in a few lines. We reply within 2 business days.

Prefer email? contact@kavalis.ch

Your information is used only to reply to you. See our privacy policy.