Straton Cyber Labs

We find the flaws in your systems before an attacker does.

Risk-free pentesting with our own AI: if we find nothing serious, you pay nothing. Then, traps and monitoring every day.

Talk to Cyber LabsSee how it works

Risk-free pentesting · Continuous defence · Our own AI models · Servers in Switzerland

01Act 1 · Our infrastructure

Our own servers. Our own AI.

  • We train our models on authorised sources: bug bounty, CVE, papers and licensed data.
  • They run on our servers, in Switzerland, and learn every day.
  • Bug bounty
  • CVE
  • Papers
  • Licensed data
  • Straton serversSwitzerland

02Act 1 · That is why

That is why your pentest costs nothing.

  • Our agents test your system on their own, without touching your operations.
  • If we find nothing serious: CHF 0. If we do, you pay per flaw.

Low CHF 150–400 · Medium 400–1 200 · High 1 200–3 500 · Critical 3 500–12 000

  • CHF 0if nothing serious is found

Request my pentest

03Act 2 · The hackers

Hackers get in. It is a matter of time.

  • There is no such thing as a secure system.
  • A single flaw is enough for someone to get into your server.
  • Intrudergets in through the network
  • Compromised server

04Act 2 · The test

20 agents attack. They never give up.

  • Each from a different angle, again and again.
  • Until they find a serious or critical flaw, with proof, so your team can close it.
  • 20 agentsdifferent angles
  • Breachcritical flaw

05Act 3 · The traps

Then, traps for the hackers.

  • We leave a window open on purpose: a decoy.
  • When they take the bait, the alarm goes off and we catch them early.
  • Decoyhoneypot
  • Alarm

06Act 4 · The guards

And watchdogs on your traffic.

  • Agents alert to any noise in your application, day and night.
  • At the slightest sign, they go and look, investigate and raise the alarm.
  • Guards
  • Noiseinvestigated

Discuss monitoring

Price per finding, by severity

That is why your pentest costs nothing.

No serious vulnerability: CHF 0.

Indicative prices, excluding VAT. The contract defines the scope, the severities and the rates.

Price per finding, by severity

  • LowCHF 150–400
  • MediumCHF 400–1 200
  • HighCHF 1 200–3 500
  • CriticalCHF 3 500–12 000

Approximate cost of a full assessment

  • Small company≈ CHF 500
  • Mid-sized company≈ CHF 2 500
  • Large companyfrom CHF 10 000

Continuous defence subscription

From CHF 500/month

small projects

Up to CHF 7 500/month

up to 10 large-scale services from the same company

  1. 01

    Real-time detection

    We monitor traffic and detect attacks as they happen.

  2. 02

    Immediate response

    We act on the spot, within the rules we agree.

  3. 03

    Patches as pull requests

    When a CVE or a news item affects you, we prepare the patch and your team approves it.

  4. 04

    Decoys

    Traps left open on purpose to catch intruders early.

  5. 05

    Hardening

    We close what is not needed and tune the configuration.

  6. 06

    Traceability

    Every action is logged and explained.

Define the scope

How we work

Seven steps, no surprises.

  1. 01

    Scope

    Which systems are in and which are not, in writing.

  2. 02

    Window

    When testing takes place, so it does not disrupt your operations.

  3. 03

    Contract

    Severities, rates and signed authorisation before we start.

  4. 04

    Testing

    Within the scope and the window, with a log of everything we do.

  5. 05

    Report

    Each finding with a reproducible proof of concept, impact and priority.

  6. 06

    Remediation

    We support your team while it fixes what we found.

  7. 07

    Re-test

    We test again and confirm it is closed.

Principles

What we do not negotiate.

  • Only with written authorisation

    No testing without a signed contract and a defined scope.

  • Data in Switzerland and the EU

    What we analyse is processed in Switzerland or the European Union.

  • Actionable reports

    Findings your team can reproduce and fix, not lists of alerts.

  • No alarmism

    Real severity, clear priority and zero noise.

Shall we talk about your infrastructure?

Tell us which services you would like to test or protect. We will reply with a scope proposal.

Define the scopeMeet the studio