We audit your company’s cybersecurity and tell you what to fix.
We check what can be seen of your company from the internet, how your accounts are protected and where someone could trick you. We give you a clear report of what needs fixing and, if you want, we fix it ourselves.
What changes
Today
Your company shows more on the internet than you think.
- Fake emails in your name
- Passwords with no second step
- Forgotten access
With Igneva
You know what can be seen from outside, and what shouldn’t be is closed off.
- A clear report
- What matters, closed off
Security research
We look for security flaws in software that other companies use. When we find one, we tell the vendor privately, and the flaw is only made public once it’s fixed, with an official number: the CVE. This is called coordinated disclosure, and it’s led by Rodrigo Cabo, Igneva’s partner and CTO.
CVE-2026-109689 · published
Sunshine Photo Cart, a WordPress plugin photographers use to show and sell their photos. A missing permission check let anyone, without logging in, see data from private galleries. The vendor fixed it in version 3.7.5.
See the published advisory
Other findings are still with their vendors. We add them here once they’re published.
How do I know if I need this?
Five questions about what your company leaves exposed. “I don’t know” is an answer too.
Is any password shared between several people, over WhatsApp, in a spreadsheet or on a piece of paper?
If the answer is yes, or you don’t knowThat’s very common. Ideally each person signs in with their own, and we help you sort it out.
Could someone who no longer works with you still get into your accounts?
If the answer is yes, or you don’t knowIt often happens without anyone noticing. We check who can get into what and close off what’s no longer needed.
If someone gets hold of your email password, can they get straight in?
If the answer is yes, or you don’t knowWith a second step on the phone, the password alone is no longer enough. It’s simple to switch on.
Could someone send an email that looks like yours and ask a client to pay into a different account?
If the answer is yes, or you don’t knowIt can be checked from the outside, without touching anything, and closed off if needed.
Could a supplier’s bank account be changed with just an email?
If the answer is yes, or you don’t knowIt’s a fairly common scam. Adding a check before paying is enough.
Let’s talk about what you need to solve.
Tell us about your caseThe first conversation is free. We learn how you work and where we can help.