# SECFORIT

> Hands-on cybersecurity consulting from Arad, Romania — penetration testing,
> application and API security, secure code review, DevSecOps, software supply
> chain security, cloud and identity hardening, and vulnerability management.
> Serving clients across Europe since 2019. Free initial assessment,
> response within 24 hours.

SECFORIT SRL is a boutique security engineering practice. The engineer who
scopes an engagement is the one who runs it. Every finding ships with proof
and a tested fix, and remediations are retested until they hold. We work with
organisations of every size — from a five-person startup shipping its first
product to an established team that needs a second pair of eyes. NDA on
request; client work is strictly confidential.

## Services

- Penetration Testing: internal, external, and web — goal-driven with proof of impact.
- Web Application & API Security: OWASP Top 10, broken auth, access control, injection, business-logic flaws.
- Secure Code Review: manual OWASP-aligned review of source — auth, input trust boundaries, unsafe deserialization.
- DevSecOps: security wired into CI/CD — SAST, SCA, IaC scanning, secrets handling, policy as code.
- Software Supply Chain Security: dependency and build-chain review, SBOM (CycloneDX, SPDX), artifact signing, trust chains.
- Vulnerability Management & Analysis: triage and prioritisation (Tenable, Qualys, Defender XDR, CISA KEV, EPSS).
- Cloud & Identity Security: Azure and AWS review, SSO/IAM, PKI, Zero Trust, hardening baselines.
- Network Assessment: recon, segmentation review, Active Directory, misconfigurations.
- Red Team Assessments: full-scope adversary simulation mapped to MITRE ATT&CK.
- Web Development & Design: sites and web applications built secure from the first commit — Next.js, hardened hosting, clean dependencies, SEO. Delivered through WEBFORIT (webforit.ro).

## Methodology

Four phases: Discovery & Assessment → Threat Modelling → Implementation →
Continuous Protection. Aligned with ISO 27001, NIST, and SOC 2.

## Who does the work

SECFORIT is led by Adrian-Răzvan Lișman, Founder & Security Engineer, based in
Arad, Romania. He works across both sides of the discipline: building the
pipelines and identity infrastructure that software ships through, and testing
systems from the attacker's side to find where they break.

- M.Sc. Cybersecurity Engineering — Technical University of Cluj-Napoca,
  Faculty of Computer Science (EQF Level 7). Research on insecure
  deserialization in web applications (OWASP A08:2025, Software & Data
  Integrity Failures).
- B.Sc. Informatics — "Aurel Vlaicu" University of Arad, graduated 9.5/10.
- Languages: Romanian (native), English (C1).

## Related

- WEBFORIT (https://webforit.ro) — web design and development studio powered by
  SECFORIT. Sites and web applications built with hardened hosting, dependency
  hygiene, and secure defaults from the first commit.

## Contact

- Email: razvan@secforit.ro (response within 24 hours)
- Location: Arad, Romania (46.1867N, 21.3123E) — serving Europe
- Site: https://secforit.ro
- Free initial assessment, no obligation.