Security hardening and NIS2 readiness, by the team that writes the code.
Sooatek fixes the vulnerabilities found, hardens your applications and sets up vulnerability monitoring. An audit left in a drawer protects nothing: here, the team that finds is the team that fixes.
§ 01 / Starting point
Two starting points, one fixed price.
- After an audit
- We fix the priority vulnerabilities of an audit report (ours or a third party’s), then check that each fix holds (re-test).
- Without an audit
- We review your hygiene measures (ANSSI hygiene guide, measures expected under NIS2) and hand you a costed action plan.
§ 02 / Hardening
Basic hygiene measures, applied.
- Two-factor authentication on administrator access
- Review of accounts and access rights
- HTTP security headers and TLS configuration
- Email: SPF, DKIM and DMARC
- Secrets removed from code and rotated
- Vulnerable dependencies updated
§ 03 / PHP2Shell emergency
PHP2Shell: check, mitigate, fix.
§ 04 / Monitoring
Monitoring triaged by humans.
- A monthly scan of your applications and their dependencies
- Human triage of the results: false positives are discarded before we write to you
- A monthly report; fixes are done at a fixed price
§ 05 / Not included
What the offer does not cover.
§ 06 / Terms
Terms of the offer.
- PHP2Shell emergency
- PHP2Shell emergency response, per server: on quote.
- Monitoring
- Vulnerability monitoring: on quote.
- Production
- No intervention in production without your written consent; a backup before every intervention.
- Payment
- Depending on the amount of the quote: payment on order, or 40% on order and the balance on delivery of each work package. Monthly subscriptions: payable in advance.
§ 07 / Frequently asked questions
Frequently asked questions
Is my company affected by NIS2?
In France, the NIS2 directive will be transposed by the “Résilience” bill, still being debated in Parliament (October 2026). ANSSI’s MonEspaceNIS2 tool lets you check your situation. Even if you are out of scope, clients who are in scope will ask about your security: the expected measures are basic hygiene, so it pays to prepare.
Do you guarantee NIS2 compliance?
No. Nobody can guarantee compliance with a French law that has not been passed yet. We fix, we harden, and we give you a written action plan.
We are under attack right now: what should we do?
First contact Cybermalveillance.gouv.fr (France) or your national CERT, who will point you to incident response providers. We then step in to restore your applications. For a PHP2Shell vulnerability, the emergency response is at a fixed price.
Let’s talk about your project.
Describe your need in a few lines. We get back to you in writing with a first opinion, the possible next step and its price.