Skip to content

The security team you don’t have to hire.

Kirrosec turns the noise from the systems your business already runs on into clear, human-actionable fixes.

LISTEN / PROPOSE / DELIVER / PROVE

Your security posture, translated.
How Kirrosec works

Less theatre.
More forward motion.

We start with your problem, recommend only what fits it, and stay until we can show you it worked.

STEP 01

We listen

You tell us what is going wrong. We keep asking until the real problem is clear, not just the symptom you noticed first.

STEP 02

We propose

A service, a tool, or sometimes neither. If you can fix it yourself in an afternoon, we will tell you that instead of selling you something.

STEP 03

We deliver

Whatever you buy comes with our team behind it. Findings in plain language, and help closing them, not a PDF and silence.

STEP 04

We prove it

We retest every fix and hand you the evidence. If the work misses what we agreed, we redo it at our cost.

Right-sized by design

Everything you need.
Nothing you don’t.

01

Penetration testing

Find the paths an attacker would actually take, before they do.

02

Social engineering & phishing

Realistic simulations that show how your team responds under pressure.

03

Security monitoring

Someone watching your systems who knows what is worth waking up for.

04

Incident response

Calm, experienced help on standby when something goes wrong.

What we build

Tools we built
because we needed them.

We build what we need to do the work properly, then release it. Ramwingu is open source today. More are on the way.

Open sourceBuilt in-houseUsed on real work
Cloud misconfigurationOpen source

Ramwingu

A multi-cloud misconfiguration scanner for AWS and Azure. It finds the dangerous defaults and insecure settings that attackers look for first.

  • AWS and Azure from a single CLI command
  • Open inbound rules in EC2 security groups and Azure NSGs
  • Publicly reachable S3 buckets and storage accounts
Phishing simulationIn development

mitphisher

A phishing simulation platform for small companies. Run authorised simulations against your own team and turn the results into training rather than blame.

  • Built for small teams without a security function
  • Training that follows the mistake
  • Reporting you can share with an insurer or auditor

Read the source

Everything we ship, and what is still in progress.

We release tools as they are ready, not as they are announced.

See what we build