Find the gap before someone else does.
PixelVisionWeb tests, monitors, and hardens the systems that run your business — clear scope, fixed EUR pricing, and findings you can actually act on.
Accepting 3 new engagements this month
Six ways we reduce your attack surface.
From a single scan to full-time monitoring, scoped clearly before any engagement begins.
Vulnerability Assessment & Penetration Testing
Simulated attacks against your web apps, network, or infrastructure to find exploitable weaknesses before attackers do.
Managed Security Monitoring
Ongoing SOC-as-a-service coverage — logs watched, alerts triaged, and real threats escalated to a human, fast.
Incident Response & Digital Forensics
Rapid containment and root-cause investigation when something's already gone wrong, with a clear remediation plan after.
Security Awareness Training
Phishing simulations and short, practical training that actually changes how your team handles suspicious email.
Cloud Security & Configuration Audits
A structured review of your cloud provider settings, permissions, and storage buckets against known misconfiguration risks.
Compliance & Risk Assessment
GDPR and ISO 27001-aligned gap analysis, with a prioritized roadmap your team can actually execute.
Three tiers. Zero ambiguity.
Every package includes a written findings report and a follow-up review call.
Baseline Shield
A focused security check to find your most urgent exposures fast.
- External vulnerability scan
- 1 web app or network target
- Written findings report
- Risk-prioritized fix list
- 1 follow-up review call
Active Defense
Ongoing monitoring and testing for businesses that can't afford blind spots.
- Monthly vulnerability scans
- Up to 3 assets covered
- Quarterly penetration test
- Security awareness training (1 session)
- 30 days incident support
Full Spectrum
Comprehensive coverage for businesses handling sensitive data or compliance requirements.
- Unlimited asset monitoring
- Full penetration testing suite
- Incident response retainer
- Compliance audit (GDPR/ISO 27001)
- 60 days incident support
The standalone checks menu
Small, focused security checks sold individually — every "Order Now" takes you straight to Contacts.
From scope to remediation.
Four steps, always in this order, so nothing gets tested without your sign-off.
Scoping Call
We define exactly what's in scope — which systems, which methods, what's off-limits — and agree a fixed EUR price in writing.
Testing & Monitoring
Assessment or monitoring begins on the agreed schedule. You're notified immediately of anything critical, not buried in a monthly digest.
Findings Report
A written, risk-prioritized report — no jargon dump, just what's exploitable, how bad it is, and what to fix first.
Review Call & Fixes
We walk through the report live and answer questions, so your team knows exactly what to remediate and how.
Findings you can act on, or we revisit them.
Every engagement includes a follow-up review call within 7 days of your report. If a finding is unclear or you believe it was missed the mark, we revisit it — full terms are on our Refund Policy.
PixelVisionWeb vs. the usual options.
Frequently asked questions.
Every package and standalone check on our Pricing page has a flat EUR price. Custom engagements get a fixed quote after a short scoping call.
We scope every test to avoid production disruption and schedule anything higher-risk during agreed maintenance windows.
Yes — a mutual NDA and a signed authorization letter are standard before any assessment begins.
A list of in-scope systems, written authorization, and a short call to confirm testing windows. We send a simple intake form after booking.
Yes — our Compliance & Risk Assessment service maps your current state against GDPR and ISO 27001 requirements with a prioritized roadmap.
Yes — assessments and monitoring are delivered remotely, so location never limits coverage. We've worked with clients across the EU.
Security that's actually usable.
PixelVisionWeb started in București out of frustration with security reports nobody could act on — hundred-page PDFs full of jargon, with no clear sense of what to fix first.
The consultancy stays deliberately small. Every engagement is led directly by a senior tester, backed by a focused team for larger monitoring contracts — never a rotating bench of junior analysts learning your systems on the clock.
The standard is simple: findings should be specific, prioritized, and explainable to whoever has to actually fix them — whether that's a developer, an IT manager, or a business owner with no security background.
Clients range from Bucharest fintech startups to regional retail and logistics companies, all needing the same thing: clear answers about where they're exposed, and a straight path to closing the gap.
The team behind the reports.
Alina Wais
Founder & Lead Security ConsultantYour point of contact for every engagement — assessments and reports run through Alina directly.
Radu Constantinescu
Penetration TesterLeads hands-on testing and monitoring coverage across client environments.
Don't take our word for it.
"They found a misconfigured S3 bucket our internal team had missed for months. The report was clear enough that a junior developer fixed it the same day."
"Fixed pricing meant our finance team approved the engagement in one meeting. No back-and-forth over scope creep afterward."
"When a real incident happened, they were on a call with us in under fifteen minutes. That responsiveness alone justified the retainer."
"The GDPR gap analysis gave us an actual roadmap instead of a generic checklist. Our auditor accepted it without a single revision."