northsignalworks runs penetration tests, threat detection, and GDPR / NIS2 compliance work for businesses that need to know exactly where they're exposed, not just a 40-page scan output nobody reads.
Every engagement is scoped to your actual infrastructure, reported in plain language, and ranked by what's genuinely exploitable.
A full inventory of everything an attacker can see from the outside, domains, exposed ports, forgotten subdomains, before they find it first.
Learn moreHands-on testing by a human tester who thinks like an attacker, not an automated scanner that just checks boxes and moves on.
Learn moreContinuous monitoring and alerting from a real analyst team, so an unusual signal at 3am gets caught, not buried in a log file.
Learn moreLocking down AWS, Azure, or GCP configurations against the misconfigurations that actually cause breaches, not theoretical ones.
Learn moreGDPR, ISO 27001, and NIS2 gap assessments that translate regulatory text into a checklist your team can actually complete.
Learn moreIf something's already gone wrong, we contain it, trace what actually happened, and help you report it correctly and on time.
Learn moreEvery package is fixed-price and defined before we start. Need something smaller or one-off? Check the à la carte list below.
For teams who need a clear, current picture of their exposure.
Our most-booked package for a complete security picture.
Full offensive engagement for businesses handling sensitive data.
Smaller, single-scope security deliverables, priced and scoped on their own.
northsignalworks was founded on a simple frustration: most security reports are noise. Hundreds of low-priority findings, no clear ranking, and a client left guessing what to fix first. We built the firm we wished existed, one that separates the signal from the noise before it ever reaches your inbox.
We're based in Geislingen an der Steige, working with manufacturers, healthcare providers, and mid-sized businesses across Germany who hold data that genuinely matters, and who now have to answer to GDPR and, increasingly, NIS2.
Every engagement is hands-on. A human tester probes your systems the way a real attacker would, not just an automated scanner producing a checklist nobody reads end to end.
Our approach is simple: rank findings by real risk, report in plain German or English, and stay involved until the fix is verified, not just filed away.
Our last vendor sent us 200 findings with no priority order. northsignalworks gave us 12 that actually mattered, and helped us close all of them within a month.
We needed NIS2 readiness documentation fast ahead of a regulator conversation. Roman's team turned the gap assessment around in under two weeks.
The phishing simulation was a genuine wake-up call. Click rates dropped from 27% to 5% after the follow-up training. Measurable, not just a nice report.
As a smaller IT team we assumed we weren't a target. The Signal Sweep proved otherwise, two critical findings on our client portal, fixed before anything happened.
Reach out directly, or send a written brief and we'll reply within one business day.
Roman Krüger
Rheinlandstraße 81
73312 Geislingen an der Steige, Germany
Send over your systems, current concerns, and timeline. We'll reply with a scoped quote, usually the same business day.
Email the briefLast updated 15.07.2026
At northsignalworks, protecting your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal information when you visit northsignalworks.com or use our services.
We may collect personal information such as your name, email address, phone number, and any other information you provide when contacting us or requesting our services.
We use the information collected to provide and improve our services, communicate with you about your projects, and send relevant updates when you've asked for them.
We do not sell your personal information. We may share it:
We put reasonable security policies in place to guard your data from illegal access, disclosure, modification, and destruction. None of any method of transmission over the Internet or electronic storage, though, is absolutely safe.
Links on our website could point to outside websites. We have no bearing on the privacy policies of those outside websites. Please have a look over their privacy policies.
Our services are not meant for people less than eighteen. We neither intentionally gather personal data from minors. Should we find out we have gathered such data, we will act to delete it.
Your location will determine whether you have particular rights about your personal information, that is, access, correct, or delete rights. Please contact us using the information below to exercise your rights.
We occasionally might change this privacy policy. Any changes will show right away on our website. For the most current information, we advise you to routinely review this policy.
Should you have questions or concerns regarding this Privacy Policy, kindly get in touch with us at security@northsignalworks.com.
Last updated 15.07.2026
At northsignalworks we strive to provide first-rate services. Please see our refund policy below should you not be happy with our services.
On all services rendered, we guarantee 7 days of satisfaction. Should you not be happy with the deliverables, kindly contact us within this time to address any issues.
You have to let us know in writing at security@northsignalworks.com within the designated period asking for a refund. Please provide your name, order number, and a statement of the problem.
Approved reimbursements will be handled within 7 business days following approval. Refunds will be granted from the original purchase payment method.
We kindly retain the right to change our refund policy at any moment. Modifications will show right away on our website. Review this policy often for changes.
Please get in touch with us at security@northsignalworks.com should you have any issues about this Refund Policy.
Last updated 15.07.2026
Welcome to northsignalworks. Using our services and visiting our website at northsignalworks.com agrees you to the following terms and conditions. Should your agreement differ, kindly avoid using our website.
You verify that you are at least 18 years old and capable of entering into these terms by using our website and offerings.
We reserve the right to change these terms whenever we so want. Modifications will show right away on our website. Your ongoing use of the site shows acceptance of the new terms.
Among our offerings are penetration testing, threat detection, and managed security monitoring. Content Creation comprising security reports, compliance documentation, and remediation guidance.
Accurate, complete, and timely information is the responsibility of clients for the effective running of services. Delays brought on by insufficient knowledge could compromise delivery schedules.
Payment comes due upon contract or proposal acceptance. We take card payment, Apple Pay, Google Pay. Late payments might cost extra.
Timeline: Agreed upon projected completion times for the project will be given. We are not liable for delays brought on by circumstances outside of our control even as we work toward deadlines.
Up to 5 changes per project are part of our services. Before the project is regarded as finished, final approval has to be sent in writing.
You will own all final deliverables once paid for. Unless otherwise decided, we reserve the right to highlight completed works on our portfolio.
Unless mandated by law, we will keep your private information under confidentiality and will not share it without your prior permission.
northsignalworks won't be liable for any indirect, incidental, or consequential damages resulting from your use of the site or the services rendered.
Please get in touch with us at security@northsignalworks.com should you have questions or concerns about these terms.