Independent security practice · Netherlands

What you see on the surface
is not where the problem is.

A kingfisher corrects for the bend in the water before it commits. Alcyon does the same with your systems: I test what you actually run, not what the diagram says, and report the findings in the order I would fix them.

Plan a review See what I test

What I do

Penetration testing

Web applications, APIs, mobile apps and internal networks, tested by hand. Every finding comes with the steps to reproduce it, not a scanner export with a logo on the cover.

Security review

Architecture, code and configuration read by someone actively looking for the way in. Worth doing before you build, and again before you ship.

Attack surface monitoring

A standing view of what you have exposed to the internet: hosts, services, certificates, forgotten staging. You get a message when it changes.

Incident support

Help working out what happened, how far it reached, and what to close first. Calm hands on a bad day.

How an engagement runs

  1. 01

    Scope

    A call to work out what actually matters. You get a written scope and a fixed price before anything starts.

  2. 02

    Test

    Hands on keyboard inside the agreed window. Anything critical reaches you the same day, not on page 40 of the report.

  3. 03

    Report

    Findings ranked by what I would fix first, each with reproduction steps and a concrete remedy, written for the people who have to act on it.

  4. 04

    Retest

    Once the fixes land, I check them and reissue the report. Included in the original price.

Who you are working with

Alcyon is one person, and that is the point. Whoever scopes your engagement is the same person who tests your systems and writes the report.

I work with Dutch and European companies, mostly scale-ups and mid-size organisations that want a senior pair of eyes on a specific system, rather than a large firm's junior bench and a template.

No account layer, no handover, no findings you cannot reproduce. If a job is outside what I do well, I will say so and point you to someone who does it better.

Start a conversation

Tell me what you are running,
and what worries you about it.

[email protected]

Replies within one working day. Dutch or English.