Find your weak spots before attackers do.
We build oolak, a platform that shows everything you own and proves every fix. We also test your defences the way a real attacker would, and help you close what we find.
- Everything we build runs inside your own network.
- Your data never leaves your servers.
- Every decision is approved and recorded.
oolak: see every asset, fix what matters, know it's really fixed.
oolak connects your scanners, inventory, cloud and ticketing tools. It shows your teams what to fix first, gives every problem an owner and confirms each fix with a fresh scan.
Know everything you own.
Servers, cloud resources, domains and certificates appear in one list, each with an owner.
Asset inventoryFix what matters first.
Real threat data and business importance turn thousands of findings into a short list.
Risk-based prioritisationKnow it's really fixed.
A finding only closes after its server is scanned again and the problem is gone.
Verified closureAn outside view from people who think like attackers.
Tools show you what is wrong. Our team shows you what an attacker could actually do with it, and helps you fix it.
Attack simulation
We act like a real attacker to find out how far someone could get inside your network, and whether your team would notice.
- Full-scope red team exercises are planned around your real threats.
- We test Active Directory, endpoint protection and lateral movement.
- You receive a clear story of what happened and how to stop it.
Attack surface review
We map everything of yours that can be reached from the internet, including the parts nobody remembers.
- Forgotten servers, old subdomains and exposed admin pages are found.
- Risky DNS records and takeover risks are checked.
- Every finding comes with an owner and a fix.
Hardening and compliance
We help you build defences that hold up, and prove it to auditors and regulators.
- Secure baselines are designed for isolated and regulated networks.
- Readiness is checked against BDDK, DORA, NIS2 and ISO 27001.
- Audit logging is set up so every action can be traced.
A fixed point to steer by.
Ulduz means "star" in the Turkic languages, the point navigators used to find their way. We started Ulduz because organisations deserve the same clarity about their own security: what they have, where they are exposed and what to do next.
We believe sensitive security data belongs with its owner. That is why our software and our engagements run entirely inside your walls.
Your data stays at home.
Vulnerability reports, network maps and risk decisions never leave your servers.
Real threats come first.
Priorities are based on what attackers are actually using, not on a vendor's ranking.
Every decision is accountable.
Important changes need a second person's approval, and every action is recorded.
Let's talk about your security.
Whether you want to try oolak on your own data or plan a security test, write to us and an engineer will get back to you.