Skip to content
HCF

Services

Security services, when they are ready

The services HCF is preparing for organizations. None is offered yet. Each one lists what has to be true before HCF will offer it.
Not yet offered

HCF is not delivering paid services today. Registering interest commits neither side to anything.

4 services

What HCF is preparing

  1. 01Not yet offered

    Website security assessment

    An authorized, non-destructive review of a website's security configuration, explained in plain language.

    • Transport and certificates
    • Security headers and cookies
    • Exposure of sensitive files and services
    • Prioritized recommendations

    Before HCF offers it · HCF's own FortiScan is complete and scope agreements are in place.

  2. 02Not yet offered

    Network assessment

    Authorized discovery and exposure review of an organization's network, with recorded scope and evidence for every finding.

    • Asset and service inventory
    • Exposure review
    • Configuration observations
    • Evidence-backed report

    Before HCF offers it · Tooling for authorized discovery is finished and tested.

  3. 03Not yet offered

    Security training

    Workshops and hands-on courses for teams, delivered through HCF Academy.

    • Security awareness for staff
    • Hands-on defensive labs
    • Secure development basics

    Before HCF offers it · HCF Academy has launched and its material has been reviewed.

  4. 04Not yet offered

    Incident response help

    Help investigating and recovering from a security incident.

    • Triage and containment guidance
    • Evidence preservation
    • Recovery planning
    • Post-incident review

    Before HCF offers it · HCF has the people, procedures and agreements to respond reliably.

Planned process

How an engagement will work

This is the intended process once services are offered. Nothing below is available today.
  1. 1ScopeAgree in writing exactly which systems may be assessed, by whom, and when.
  2. 2AuthorizeConfirm the person signing has the right to authorize the work.
  3. 3AssessRead-only, bounded checks inside the agreed scope, with every action logged.
  4. 4ReportPlain-language findings with evidence, priorities and recommended fixes.

Interested?

Tell us what you would need

Registering interest helps HCF decide what to offer first. You will not be charged or committed to anything.