Dottor Box services
Around thirty services in three families, from the scan to the document for the auditor. Each one is activated on its own, when your company needs it.
You know what is exposed, every day
Vulnerability assessment of the internal network, external network and web applications, Microsoft and Google identities, endpoints, the dark web. Scans are non-invasive and complemented by manual checks by our staff, to remove false positives and false negatives.
Cyber Screening
What anyone looking at your company from the internet can see, with a risk score to start from.
Learn more SeeAttack Surface
A reasoned register of the networks, addresses, applications and domains to protect, with how critical each one is.
Learn more SeeVulnerability Assessment
Six checks from inside and outside, with CVSS severity, history and alerts on what is new.
Learn more SeeMicrosoft Entra ID
The security posture of your Microsoft 365 tenant across 72 indicators, read-only.
Learn more SeeGoogle Workspace
35 checks from the CIS benchmark on your Google Workspace configuration, email included.
Learn more SeeAsset Management
A single IT inventory of devices and software, with a graph map of the network.
Learn more SeeCyber Agent
The endpoint agent: security events, file integrity and clear, readable alerts.
Learn more SeeManaged SIEM and XDR
Centralised logs, event correlation and endpoint response, with analysts who filter out the noise.
Learn more SeeSOC and MDR
Dottor Marc's Security Operation Center: monitoring, managed response and, if you need it, 24/7 cover.
Learn more SeeCyber Drill
The probe installed on site that analyses your internal network. No firewall ports to open.
Learn more SeeDark Web Monitoring
Compromised company credentials and mentions of your brand on leak and ransomware sites.
Learn more SeeCyber Awareness
Simulated phishing campaigns prepared and run by Dottor Marc, with the results in the platform.
Learn more SeeThreat Intelligence
News and threats that concern your industry and your suppliers, gathered into a digest.
Learn moreThe six Vulnerability Assessment checks
You turn findings into a management system
Self-assessment against 13 standards, risk analysis, procedures, audits, nonconformities, suppliers and training. A control implemented once counts for every standard that requires it.
Gap Analysis against 13 standards
How far you are from NIS2, GDPR, ISO 27001 and the other frameworks, in terms of coverage and maturity. And the simulation: if I activate these services, where do I get to?
How the gap analysis worksSupported standards
Each framework has its own page: what it requires, who it applies to and which Dottor Box modules produce the evidence.
Risk Assessment
Risk analysis based on ISO/IEC 27005, with a treatment plan and residual risk.
Learn more GovernCompliance and GRC
Policies, procedures, audits and evidence for eight frameworks: one piece of work that counts for several standards.
Learn more GovernBusiness continuity
Business Impact Analysis, continuity plan and backup checks, guided by questionnaires.
Learn more GovernRecords of processing
The GDPR Article 30 register, with processing activities suggested by an analysis of your Drive.
Learn more GovernGDPR forms
Appointments, privacy notices and authorisation letters for all your staff, generated in one step.
Learn more GovernIncident Response and Data Breach
CSIRT, incident handling phases and a breach register with notification deadlines.
Learn more GovernSupply Chain
Supplier assessment with questionnaires completed from a link, no accounts needed.
Learn more GovernDocumentation
Your company documentation in a dedicated wiki, exportable in open formats.
Learn more GovernTraining
E-learning for your staff, with a record of completed courses ready to show.
Learn moreYou have the proof when you need it
Reports in Italian and English, presentations with editable charts, the Statement of Applicability, registers and exports, with the history of checks from the last six months. And a specialist when a decision needs to be made.
Documents and reports
Everything the platform produces for the auditor, the customer or the board.
Learn more ProveReporting
Executive, technical and presentation reports with editable charts, generated automatically too.
Learn more ProveTime Machine
The calendar of checks from the last 180 days and the archive of weekly reports.
Learn more ProveSpecialist consulting
A Dottor Marc specialist by appointment, booked directly from the dashboard.
Learn moreIndividual services, within three service levels
Every company has its own Dottor Box and activates only the services it needs: a company that has to comply with NIS2 chooses one set, a company that only wants vulnerability assessment chooses another.
Above the services sits the service level: Security Monitor, MDR + SOC or MDR + SOC 24/7, depending on how much you want to delegate to Dottor Marc's SOC.
Registration and your Dottor Box
You create the account and your dedicated environment is set up.
Cyber Screening
The first snapshot of what can be seen from the internet, with a risk score.
Activating the services
Once the proposal is accepted, you choose what to monitor and which standards to follow. How it works.
Do you know what someone looking for a target can see of your company?
In a demo on your real systems we show you what is exposed, how much it matters and where to start. Then, if you need it, a tailored proposal.