Cyber Dacians

Cyber Dacians is a cybersecurity services firm providing offensive and defensive security, governance, risk and compliance, and advisory services. The source does not state a formal registered address or a single headquarters country; the team is described as located within Europe and the Americas and services are delivered globally.

Services and capabilities

• Penetration testing and red teaming: manual security assessments of web, mobile and network applications, binary analysis, ATM testing and full-scope red team engagements that simulate attack scenarios and produce technical findings and remediation guidance.
• Code review and software security: source-code analysis across multiple programming languages, full codebase coverage, use of tooling combined with expert manual review, and remediation verification through re-testing.
• Compliance, audit and GRC: maturity diagnostics, auditing, standards implementation and ongoing consultancy for frameworks referenced in the source such as ISO 27001, NIST, PCI-DSS, GDPR and HIPAA.
• Incident response and forensics: digital forensics, post-incident analysis and hardening activities to assess and remediate successful intrusions.
• Cloud and infrastructure security: cloud security assessments, secure configuration reviews and infrastructure hardening.
• Advisory, training and simulation: vCISO services, strategic consulting for government entities, tabletop exercises and wargaming, C-level training, phishing simulations and cyber intelligence support.

Industry focus

• Government and public sector: consulting for governmental agencies, policy and capability development, strategic support and government-focused security implementations.
• Healthcare and regulated businesses: compliance work mapped to HIPAA and related privacy standards, including audits and remediation activities.
• Financial and payment systems: security assessments related to payment card standards (PCI-DSS) and tests targeting cash machines (ATMs) and payment infrastructure.
• General enterprise technology: application security, cloud deployments and internal security operations improvements for a range of organizational customers.

Technology and delivery approach

• Technical themes: manual security testing combined with tooling, source-code analysis, reverse engineering and binary hacking, digital forensics, cloud security assessments and threat/incident investigations.
• Data and analytics: generation of comprehensive reports, diagnostic assessments and maturity measurements to support compliance and remediation tracking.
• Integration and implementation: standards implementation, secure configuration and hardening activities integrated with auditing and re-testing to verify remediation.
• Automation and tooling: use of modern security tools alongside expert manual techniques for code review, testing and simulation exercises.
• Delivery modes: on-site and remote assessments, continuous consultancy (including vCISO and staff augmentation), tabletop exercises and operational handover documentation.