Turvaskannimine teie ettevõttele

The Basic Scan includes: Smart-ID/Mobile-ID verification, RIK company registry check, domain DNS ownership validation, OWASP Top 10 vulnerability scan, SSL/TLS certificate analysis, security headers audit, and a professional PDF report with executive summary and remediation recommendations.

The Professional Scan includes everything in Basic plus: API access for integration, scheduled recurring scans (weekly/monthly), custom compliance frameworks (ISO 27001, NIS2, PCI DSS, etc.), priority support with dedicated analyst, basic penetration testing, retesting within 30 days, and a compliance evidence package for auditors.

Annual Monitoring is billed once at €750 for 12 months. It includes 12 monthly scans (first scan after verification, then one per month), a PDF report after each scan, identity/RIK/DNS verification, OWASP Top 10, SSL/TLS and headers checks, API access, and a compliance evidence package. That is about €62.50 per month.

Click "Start Security Scan" or "Order Basic/Professional Scan", fill in your company details (name, registry code, domain, authorized board member), complete Smart-ID verification, and we'll handle the rest. Payment options include bank link (LHV, Swedbank, SEB, Coop) or invoice for Estonian companies.

We initiate a Smart-ID or Mobile-ID authentication request to the authorized person's phone. They confirm in their app with their PIN. The digital signature is cryptographically verified and legally binding under eIDAS regulation. This confirms the person's identity with government-grade assurance.

We query the Estonian Business Register (RIK) in real-time to verify that the person who completed Smart-ID verification is currently registered as a board member (juhatuse liige) of the company. This prevents unauthorized individuals from ordering scans on behalf of companies they don't represent.

We provide a unique verification token. You add it as a TXT record (or CNAME) in your domain's DNS settings. Our system automatically queries the DNS and validates the record. This proves you control the domain before we scan it, preventing unauthorized scanning of third-party assets.

The order will be rejected. Only registered board members (juhatuse liikmed) can authorize security scans for their company. If your board composition has changed, update it in the RIK register first, then place the order.

We cover OWASP Top 10 (injection, broken auth, sensitive data exposure, XXE, broken access control, security misconfiguration, XSS, insecure deserialization, vulnerable components, insufficient logging), plus network services, SSL/TLS config, security headers, exposed databases, cloud misconfigurations, and custom business logic tests (Pro tier).

Yes. Our scans are designed to be non-destructive. We use safe checks by default and avoid exploitation. For production systems, we recommend scheduling during low-traffic periods. Professional tier includes a dedicated analyst who can coordinate timing and monitor for any issues.

Typically 2-4 hours from verification completion to report delivery. Basic scans are faster (~1-2 hours), while Professional scans with deeper checks and penetration testing take longer (3-6 hours). You'll receive email notifications at each stage.

Currently we scan internet-facing assets only (domains, public IPs, cloud endpoints). For internal applications, Professional tier customers can provide VPN access or use our secure tunnel option (additional setup required). Contact us for custom arrangements.

Primary delivery is a professional PDF report branded with your company logo. It includes: executive summary, risk overview (Critical/High/Medium/Low), detailed technical findings with CVSS scores, reproduction steps, remediation guidance, and compliance framework mapping. Raw data (JSON/CSV) available via API for Pro tier.

Yes. Our reports include compliance mapping to GDPR Article 32, ISO 27001 Annex A, NIS2 Directive, PCI DSS, and Estonian Cybersecurity Act requirements. Professional tier includes a formal compliance evidence package suitable for auditors.

Yes, contact us at security@kuldaar.ee for a sanitized sample report. It shows the structure, detail level, and formatting without any real client data.

Professional tier includes one free retest within 30 days of the original report. We verify that reported vulnerabilities have been properly remediated and issue an updated report. Basic tier retests are available for €149.

Bank links (LHV, Swedbank, SEB, Coop Pank), credit/debit cards, and invoices (14 days net) for registered Estonian companies. All prices include 20% VAT for Estonian entities.

Yes. Annual Monitoring is €750 for 12 months and includes 12 monthly scans (one per month) plus a PDF report each time. That is about €62.50 per month, billed once per year. One-time Basic (€299) and Professional (€499) scans remain available.

If verification fails (identity, RIK, or DNS), you receive a full refund automatically. Once scanning begins, refunds are prorated based on work completed. See our Terms of Service for full details.

Yes, invoices are automatically generated and emailed for all payments. For Estonian companies, we include the registry code and VAT number. Invoices are compliant with Estonian accounting requirements.