About us

Dottor Marc, the company behind Dottor Box

A team of professionals with more than twenty years' experience in cyber security and regulatory compliance consulting and training. Dottor Box® is the software at the heart of our services.

Our story

Since 2018, information security for Italian companies

Dottor Marc was founded in 2018 by professionals who have worked in cyber security and regulatory compliance consulting and training for more than twenty years. It is based in Verona, Italy.

What we offer covers design, development, sales and after-sales support. We handle incident and data breach management, security assessments, cloud security, penetration testing and vulnerability assessment, as well as information security training.

Dottor Box® is our proprietary Attack Surface Management software: we develop it in Italy, in Italian and English, around the rules that apply to companies in Italy. It is the tool our team works with every day and the one we put in our clients' hands.

What we do

Security services built around a platform

Incident response and data breaches

Handling of incidents and personal data breaches, with our CSIRT and, at the MDR levels, the role of Incident Response Team Lead.

Assessments and penetration tests

Continuous vulnerability assessments with Dottor Box and penetration tests carried out by our team.

Cloud security

Assessment of the security posture of Microsoft 365 and Google Workspace and of the cloud services the company uses.

Regulatory compliance

NIS2, GDPR, ISO/IEC 27001 and the other frameworks, from the gap analysis to the evidence for the audit.

Training

Information security training for staff and simulated phishing campaigns.

Security Operation Center

An in-house SOC that monitors, carries out threat hunting and reviews scan results before they reach you.

The SOC

People who read what the machines find

Within Dottor Marc there is a Security Operation Center: a team of specialists who organise and run the proactive services and carry out monitoring and detection on clients' public-facing assets directly, with software modules of their own.

It is the SOC that complements automated scans with manual checks to remove false positives and false negatives, and that responds to alerts at the MDR + SOC levels.

We also develop new test routines and contribute to the CVE programme, the public catalogue of cyber security vulnerabilities.

2018year founded
20+years of the founders' experience in cyber security
ISO 27001certified information security
ISO 9001certified quality management system
Our principles

How we work

Made in Italy

Software, interface and reports in Italian and English, support in Italian, built on Italian and European rules.

The same controls

We are ISO/IEC 27001 and ISO 9001 certified: we apply to ourselves what we ask of our clients.

Accuracy

An indicator with no data is "not assessable", not "passed". A false positive, once declared, does not come back.

Clear terms

Contract length, renewal, cancellation and what support covers are set out in writing before you sign. Read them here.

Where we are

Dottor Marc S.r.l.

  • Phone+39 045 511 8550
  • OfficeViale Colonnello Galliano 57, 37138 Verona, Italy
  • CompanyDottor Marc S.r.l. · VAT no. IT04569090238
  • Client areamy.dottorbox.it

The Dottor Marc group

Dottor Box is part of the range offered by Dottor Marc, which includes consulting, penetration testing, incident response and training.

Want to know whether Dottor Box is right for you? Write to us: a person will answer you, not a price list.

Do you know what someone looking for a target can see of your company?

In a demo on your real systems we show you what is exposed, how much it matters and where to start. Then, if you need it, a tailored proposal.