threat_01
Ransomware
Ransomware was present in 44% of the breaches analyzed. (Verizon DBIR, 2025)
← IT SECURITY
Daillac / IT SECURITY
SECURITY,NO COMPROMISE.
Protect your digital assets, web applications, customer data, and operations. Audit, pentest, Law 25 compliance, IAM/MFA, backups, and incident response to strengthen resilience.
Security AuditAudit · Pentest · Law 25 · Incident response
security · diagnostic
security-audit
CRITICAL12s
Brute-force attempt blocked
CVE-2025-31 · edge-01
WARNING47s
Abnormal request spike
AUTH-RATE · api-gw
INFO1m
Certificate renewed
TLS-RENEW · cert-mgr
CRITICAL3m
Spoofed domain detected
PHISH-001 · mail
● controls activeweb · api · access · backups
Law 25 · Quebec
OWASP · Web/API
IAM · MFA
Tested backups
// threat-model
The risks are real
threat_02
Non-Compliance
Heavy penalties related to Bill 25 (Quebec) and GDPR.
threat_03
Data Breach
Loss of customer trust and devastating impact on image.
threat_04
Phishing
Mobile social-engineering attacks have a 40% higher success rate than email phishing. (Verizon DBIR, 2026)
threat_05
Downtime
How much does a day without access to your systems cost?
threat_06
Technical Debt
Obsolete systems: an open door for hackers.
// arsenal
OUR ARSENAL
Concrete controls to reduce risk before it becomes an incident.
mod_01
We simulate attacks to identify your vulnerabilities before attackers do. Complete analysis of web applications, APIs, infrastructure, code, and configurations.
- Web, API & network penetration testing
- Source code audit
- Vulnerability scanning and prioritization
mod_02
Progressive compliance with Law 25, GDPR, or PIPEDA depending on your markets. Personal data protection, internal policies, and execution evidence.
- Privacy policies
- Incident register
- Consent and responsibility management
mod_03
We prepare the roles, procedures and first actions needed to limit the impact of a breach, ransomware attack or compromise.
- Response plan and escalation chain
- Scenario-based simulation exercises
- Containment, evidence and recovery
mod_04
The strongest firewall is your team. We train employees on best practices, phishing, access controls, and incident reflexes.
- Simulated phishing campaigns
- Awareness workshops
- IAM/MFA access management
// methodology
Defensive Approach
phase_0303
Detect
Monitoring, alerts, and weak signals on critical systems.
// faq
Frequently Asked Questions
01Am I concerned by Bill 25?+
Yes, if you do business in Quebec and collect personal data, regardless of company size.
02What does a security audit cover?+
Depending on the mandate: web application, API, infrastructure, access, backups, Law 25 policies, exposed surface, and remediation priorities.
03Can you secure an existing application?+
Yes. We can audit code, fix priority vulnerabilities, improve access control, add monitoring, and build a security roadmap.
// related
Complementary Services
Integrate security into your digital ecosystem
// engagement