We need better security

Blackpine Protect

Use this route when the objective is to reduce risk before the next incident: assess the environment, harden important systems, test attack paths, improve identity and email controls, strengthen recovery, or prepare for a framework review.

Use the specialist service only after the objective is clear.

Blackpine can start from the decision the organization needs to make and then choose the correct mix of assessment, hardening, penetration testing, application security, cloud security, identity, email, advisory, compliance readiness, or recovery work.

  • Review our overall security posture and prioritize weaknesses.
  • Harden Microsoft 365, Google Workspace, cloud, websites, endpoints, or email.
  • Test a website, API, network, application, or cloud attack path with written authorization.
  • Review backups and ransomware readiness.
  • Improve policies, vendor risk, awareness, tabletop readiness, or security leadership.

Specialist services

01Security AssessmentEvidence-led review of exposure, privileged access, configuration, and recovery controls.→02Microsoft 365 / Google Workspace SecurityReview the identities, mail controls, and recovery paths attackers use to retain access.→03Endpoint SecurityAvailable through Blackpine On-Demand, Blackpine Managed Security.→04Penetration TestingAuthorized testing of web, external, internal, and cloud attack paths with evidence and remediation context.→05Website & Web Application SecurityTrace control of domains, DNS, hosting, CMS administration, dependencies, and recovery.→06Cloud SecurityExamine privileged access, external sharing, integrations, and recovery across cloud and SaaS.→07Email Security & Phishing ProtectionReview the identities, mail controls, and recovery paths attackers use to retain access.→08Security Awareness TrainingAvailable through Blackpine On-Demand, Blackpine Managed Security.→09Phishing SimulationsAvailable through Blackpine On-Demand, Blackpine Managed Security.→10Backup & Ransomware ReadinessTest roles, communications, evidence, backup ownership, and recovery decisions before pressure arrives.→11vCISO / Security AdvisoryIndependent technical guidance for security priorities, remediation, vendors, and operating decisions.→12Security Policies & ProceduresIndependent technical guidance for security priorities, remediation, vendors, and operating decisions.→13Compliance ReadinessTechnical gap and evidence readiness work for security frameworks without overstating certification or attestation.→14Vendor / Third-Party Risk ReviewsIndependent technical guidance for security priorities, remediation, vendors, and operating decisions.→15Tabletop ExercisesTest roles, communications, evidence, backup ownership, and recovery decisions before pressure arrives.→
Scope before tools.

Active testing requires explicit written authorization. Compliance-readiness work is not a certification, legal opinion, regulatory determination, or attestation unless a separately qualified service provides that outcome.

Engagement models

Blackpine On-Demand

Pay-as-needed work for organizations that do not have a recurring Blackpine subscription.

Blackpine Managed Security

Recurring security relationship covering agreed monitoring, endpoint protection, vulnerability management, account review, Security Desk support, and reporting.

Blackpine Response Retainer

Pre-established incident-response relationship intended to reduce contracting and environment-discovery friction during an incident.

You do not need to diagnose the problem first.

Describe what happened or what you need. Blackpine can assign the appropriate specialist path internally.

Discuss security improvements