Threat Intelligence & Detection Review
Know which of the week’s CVEs actually matter to your stack — and whether you would catch what happens next.
What we cover
- Stack-specific CVE impact analysis — not generic severity scores
- Detection coverage review against real attacker TTPs
- Ransomware readiness assessment and IR plan stress test
- SOC runbook and alert-quality review
- Weekly or monthly leadership threat briefings
- Focused watchlist for your exact technology
How we test
What you actually run — platforms, versions, exposure — so analysis starts from your reality.
A maintained list of the vulnerabilities and threat actors that genuinely touch your stack, each with a plain-language impact note.
Purple-team style checks: for the attacks most likely to hit you, would an alert fire, and would someone act on it?
A board-ready threat briefing plus, if you want it, a recurring cadence that keeps the picture current.
What you get
- Focused watchlist for your exact technology stack
- Detection gap report mapped to MITRE ATT&CK
- Board-ready threat briefing deck
- Optional ongoing briefing cadence
The engagement at a glance
A short conversation about your environment. You receive a written scope, timeline, and fixed quote — no obligation.
Testing begins only with your written permission and agreed rules of engagement. Always.
A calendar agreed before we start, with an agreed communication plan while testing runs.
A verification pass over everything you fix — included in the price, not an add-on.
See the full engagement process → and how pricing is scoped in our public pricing guide.
Related research from Hmmnm
Common questions
We do not have a SOC — is this still useful?
Arguably more so. A right-sized watchlist and a ransomware readiness check give a small IT team the same prioritization a large SOC gets, without the overhead.
Do we need a SIEM for the detection review?
No. We review whatever logging and alerting you have — SIEM, EDR console, cloud audit logs — and scope gaps to what is realistic for your size.
How is the ongoing cadence delivered?
A recurring written briefing plus a short call, weekly or monthly, tracking changes that touch your watchlist.
Want this assessed for your environment?
A short scoping conversation is enough to get a fixed quote. No obligation — a researcher replies.
Start the conversation →