Talk to us
English Dansk
Home Services Customers About Stories Talk to us
A hand on a keyboard at a PB Security workstation, with a PB Security mug beside the screen
Home

From exposure to resilience

We help organisations turn security from a list of findings into decisions they can act on, connecting the technical detail to the business risk, so the right people know what's at stake and what to do next.

Explore services

Start with your question

We will guide you to the right solution.

Understand Your Exposure

Validate Your Defences

Reduce Your Risk

Build Lasting Resilience
Article Why is a password-cracking rig running local LLMs? Simon shares how Bambino evolved from a password-cracking rig into PB’s local LLM environment, giving us greater control over sensitive information. Article Ten years of hacking and defending How many routes to privileged access did an attacker have in 2015, and how many are there now? Article The first hour Most organisations survive a crisis. So what does preparedness actually buy you? The difference is never survival. It is the first hour. Article I did not read a book this summer Can my organisation adopt AI without creating new security risks? This summer I stopped reading about AI and started building with it. Article Do you need a CISO, but not a full-time position? Who owns your security strategy when nobody's job title says they do? One or two days a month. Article Can we crack your passwords? Would your password policy hold if somebody actually tested it? In one engagement we recovered 67.3% of the passwords, on entirely ordinary patterns. Article Unresolved risk is a transformation waiting for permission Who in your organisation is actually allowed to fix the risks you already know about? The gap between knowing and acting is a management decision. Article The illusion of resilience When did you last question whether your security posture matches your actual risk? Most executives carry more risk than they realise, and can absorb less. Article The risks of Sites.Read.All Which applications can read every SharePoint site and every OneDrive folder in your tenant? One permission grants all of it, and it looks reasonable. Article Assume Breach If an attacker were already inside tonight, how far could they get before anyone noticed? Article A CIS 18 assessment may be the wake-up call you need You have firewalls, policies, MFA and audits. Do you know whether any of it performs in a real attack? That is not the same question as compliance. Article Password guidance What password policy should you actually run? Here are the lengths we recommend for users, admins and service accounts, and the work that sits beside them. Article Alerting on changes to Exchange Online threat policies Would you know if somebody weakened your Exchange Online threat policies? The log exists, but only once you have switched the collection on.
Service Risk Assessment Find out which risks actually threaten the business, so investment goes where it changes the outcome. Service Maturity Assessment A clear picture of where your security capability stands today, and a realistic order to improve it in. Service Exposure Assessment See your organisation the way an attacker sees it from the outside, before they decide it is worth their time. Service Active Directory Assessment Active Directory decides who reaches what. We look for the weaknesses that turn one account into all of them. Service Microsoft 365 Assessment Your Microsoft 365 tenant holds the working day. We check that its configuration protects it rather than assuming so. Service AWS Security Assessment Cloud moves faster than its governance. We review what your AWS environment permits, and what it should not. Service AI Security Assessment AI is already in use across your organisation. The question is where, on which data, and under whose control. Service Penetration Testing A vulnerability list tells you what might happen. A test tells you what an attacker can actually reach. Service Assume Breach A compromised laptop is routine. What an attacker reaches from it is the question nobody has answered. Service Web Application Security The applications your customers touch are the ones attackers study first. We test them the same way. Service AI Application Security Assessment AI features open paths ordinary testing does not look for. Prompt manipulation, data leakage, wide integrations. Service Attack Surface Assessment Every new service adds a door. We find the ones facing the internet, including those nobody remembers opening. Service Phishing Simulation Most incidents start with one convincing email. See how your organisation responds before a real one arrives.
Service Security Hardening Findings only reduce risk once they are implemented. This is the part where the environment actually changes. Service Active Directory Hardening Close the paths used to move from one account to the whole estate, without breaking daily operations. Service Active Directory Tiering Separate administrative access by tier, so a compromised workstation cannot become a compromised domain. Service Microsoft 365 Hardening Turn assessment findings into a Microsoft 365 configuration that holds, without getting in the way of work. Service Azure Hardening Identities, networking, subscriptions and governance, brought in line with how Azure is meant to be run. Service Server Hardening Servers accumulate services, exceptions and settings nobody owns. We reduce what is exposed and keep it so. Service Windows Workstation Hardening The laptop is where most intrusions begin. Configuration that makes it a harder first step. Service Mac Workstation Hardening Mac devices belong to the same estate and deserve the same baseline, configured as Apple expects. Service Strategic Advisory Independent advice on what to do next, in what order, and why, with no product to sell you. Service CISO as a Service Security leadership at the level you need it, without carrying a full-time executive salary. Service Governance, Risk & Compliance (GRC) Governance, risk and compliance as one structure, so decisions can be evidenced rather than argued. Service ISMS The governance, policies and processes that let information security be managed consistently, not case by case. Service ISO 2700x From first gap assessment to audit, with the management system built into how you already work. Service NIS2 Understand which obligations apply to you, how far you are from them, and what to do first. Service Business Continuity Know which processes cannot stop, what they depend on, and how the organisation gets them back. Service Assisted Audits Preparation, evidence and follow-up, so the audit measures your security rather than your paperwork. Service Security Training & Workshops Training built on real incidents and your own environment, so people recognise what they are likely to meet.
News Our team is growing Company Day brought the PB Security team together and gave us the chance to welcome our new Marketing Specialist. News Jonathan has joined the team Who joined our offensive team as Senior Security Advisor? Jonathan, with four years of hands-on security work. News Our new website is live Looking for a first step without knowing what it is called? The new site starts from your question, not our service list. News PB Security is now an approved SKI supplier Can a public authority buy our services through SKI's framework agreements? Now yes. News Custom detection rules for Microsoft Defender XDR Is your Defender setup detecting what you already pay it to detect? News BSides København this Saturday Are you going to BSides København on Saturday? Come and say hello, the team will be there. Article Have you met DORA and NIS2? Would your governance survive an audit if the regulator arrived this quarter? They have started. News Threat alert: PDF Editor.exe appears compromised Is PDF Editor.exe installed anywhere in your environment? These are the indicators to search for. News Our new password cracker is nearly live Are your passwords strong enough to survive purpose-built cracking hardware? Soon we can tell you.
What our clients say

If you need help, we're here.

Tell us where you are, and we'll help you find the right first step.

Talk to us