Services

• Continuous watch

  CAD $250–400/month depending on scope.

  We monitor your credentials, your domain and the critical vulnerabilities that affect your stack, while you sleep.

  Learn more

  What is watched: credential leaks tied to your domain, changes to your domain and certificates, critical vulnerabilities published for the software you use. You get a written alert when something calls for action, with the steps to follow.

• Initial security audit

  From CAD $2,500.

  A complete X-ray of your posture, a written report + a prioritized action plan your techs can execute.

  Learn more

  We review your access, workstations, servers, backups and exposed services. The report ranks every finding by severity, and the action plan says what to do first. It is the starting point of most engagements.

• Application / infrastructure pentest

  CAD $3,500–5,000/day depending on complexity, fixed price on quote.

  We attack your systems to qualify your defences. Detailed report + proof of concept for the flaws found.

  Learn more

  The scope and the rules of engagement are set in writing before the first test. Every flaw comes with its proof of concept and the recommended fix. We strike to qualify, not to destroy.

• AI red team

  On quote.

  Integrity audit of the AIs you already use (customer chatbots, internal assistants, vendor tools). The unique Cerbère angle.

  Learn more

  We test what your AIs leak, what they can be made to say or do, and what they do with your data. The written report says where they hold and where they give way.

• Rootkit & spyware screening

  From CAD $1,500.

  Analysis of your systems to detect what is already installed without your knowledge.

  Learn more

  We examine your workstations and servers for spyware, rootkits and persistent access. You get a written report: what was found, what was removed, what remains to watch.

• Hardening

  On quote depending on scope.

  We harden your systems after diagnosis, with a written, self-reproducible deliverable.

  Learn more

  We apply the fixes and settings the diagnosis put at the top of the list. The deliverable describes every change, so your team can redo it without us.

• Simulated phishing

  CAD $800–1,500 per campaign.

  A campaign sent to your team, a written report + a pre-recorded debrief video. 100% asynchronous.

  Learn more

  No meeting to schedule: the campaign goes out, the results are measured, and your team watches the debrief when it can. The report measures clicks and reports, without pointing a finger at anyone.

• Backups tested by restoration

  CAD $1,200 per exercise.

  We restore your backups in an isolated environment and sign off that they truly hold.

  Learn more

  A backup that has never been restored is a hypothesis. We restore, we check that data and services come back, and we hand you the signed record of the exercise. It is a small business's first protection against ransomware.

• Incident response

  Retainer CAD $500/month + emergency hourly rate (on quote).

  Intervention before, during and after an attack. Response plan, monthly retainer, emergency hourly rate.

  Learn more

  Before: a written response plan, ready to follow. During: we contain and we document. After: we explain what happened and what changes. With the monthly retainer, the plan and your context are already in hand on the day it counts.

Ranges in CAD for local SMBs. USD equivalent +0% for international clients.