Security for the rest of us.
Detection, investigation, and incident response for the businesses that need it most. Run by people who kick out attackers for a living.
The difference
Every case is handled by a human.
Most managed, large-scale security service providers route security events through a language model and hope it sorts the real threats from the noise. We've watched that approach quietly fail.
We use automation where it removes toll on the practitioner, enrichment, response, evidence collection to name a few. Every case is triaged, investigated, and closed by a human who is accountable for the call.
Credentials
Unparalleled expertise you'd normally have to fly in.
We hold the GIAC GCFA and GSOC, gold-standard security certifications that define digital forensics, detection engineering and security operations.
Our team's background reaches from protecting private banks and critical infrastructure in Europe, all the way to securing airlines and healthcare providers across Latin America. The same standard that used to guard the biggest players now protects the businesses that need it most.
What we do
Detect, investigate, respond.
Detect
Endpoint detection and response on every machine, tuned to your environment. When something looks wrong, it reaches a senior analyst in seconds, not a first-tier queue that has to escalate, wait, and re-learn your case from scratch. The right person is already on it.
Investigate
We analyze every event in full context, and when it matters we pull relevant forensic evidence like memory, persistence, process history to establish what actually happened. Behind all our conclusions stands a professional with years of industry experience.
Respond
Contain, isolate, eradicate. We act within minutes to stop an active threat and remove the attacker. Every action is logged in real time to the case's timeline. For a real incident, you get a extensive report, covering what happened, what was done to remediate, and how to stop the attack happening again.
Why Duntze
The case for working with us.
We are a small team of experienced practitioners.
The people watching your environment are the same people who respond when it matters. You focus on running your business, we'll take care of security.
Priced for the businesses we serve.
Enterprise-grade protection without the enterprise price tag or the fine print. You pay for coverage that fits your size. No minimums built for companies ten times bigger, no surprises on the invoice.
Regional context, international standard.
Years of hands-on DFIR across Europe and Latin America. Threats here have their own shape, the response should be built for it.
Field notes
Notes from the field.
Anatomy of a ClickFix-to-RAT campaign
A trojanized draw.io build, a lookalike C2 domain, and the chain of artifacts that gave it away.
DFIRSweeping common persistence, fast
The handful of registry keys, scheduled tasks, and services that account for most real-world persistence — and how to triage them in minutes.
ForensicsGet in touch
Tell us what you're protecting.
Let's talk security. A short conversation is usually enough to tell whether we're the right fit.
[email protected]