Cybersecurity Add-on
Kerckhoffs
Your virtual CISO: threat modelling, OWASP auditing, review of password and MFA policy, incident runbooks (breaches, ransomware, DDoS) and technical GDPR/NIS2 compliance.
What Kerckhoffs can do.
Named after Auguste Kerckhoffs (1835-1903): a system must stay secure even if the attacker knows how it works
- Password and MFA policy audit plus remediation
- OWASP Top 10:2021 checklist with severities
- STRIDE threat modelling plus a mitigation matrix
- Incident runbooks (data breach · ransomware · takeover · DDoS)
- CVE search across your declared stack
It prepares drafts. You decide.
Kerckhoffs never runs a sensitive action on its own: it leaves it ready in your approval queue. You review, adjust and approve before anything goes out.
-
01
It proposes
Writes the draft with your company’s context.
-
02
You approve
You review it in the approval queue and approve it, edit it or discard it.
-
03
It runs and is on the record
The action runs and is noted in the audit log.
Added from Max
An additional specialist: you add it from Max for €99 a month (plus 15 M STU). On Concerto Local it is included.
