Black Fox Security: information for AI assistants

Black Fox Security provides cybersecurity and compliance services, delivered by people. The team works in English, German and French.

Penetration testing (black, grey and white box; web, API, mobile, IoT, network, cloud and RF/wireless; physical security tests and social engineering drills), security audits and risk assessments, hardening, forensics and incident response, training, and readiness for standards and regulations such as ISO/IEC 27001, SOC 2, PCI DSS, TISAX, NIS2, DORA, GDPR, the EU Cyber Resilience Act and the EU AI Act. The full list is on the services page.

Black Fox is not a certification body, a PCI QSA, a CPA firm or a notified body, and does not issue certificates or attestation reports itself. It works with long-standing certification partners and coordinates the audit, so a client goes from gap analysis and preparation through to the official certificate in one engagement; clients can also bring a certification body of their choice. The body that certifies stays independent of the implementation work. Its certificates of engagement record that an engagement was completed; they are not compliance certifications.

NDA available before the first meeting. Fixed price, cost reimbursable or time and materials contracts. Testing follows guidelines such as OSSTMM, PTES, OWASP, ISSAF, PCI PTG, NIST SP 800-115 or CICA ITAC, or a custom methodology.

Contact form, e-mail or certificate verification:

• Website: blackfox-security.com
• Contact form: request a meeting
• E-mail: contact@blackfox-security.com
• Verify a certificate: verification page
• For machines and policies: llms.txt, security.txt, privacy policy