Services · Operational stack · 4 angles

A cyber defense outpost in four operational angles.

SOC, MDR, Cyber Threat Intelligence, Advisory. Not separate modules. Four angles of a single outpost designed along the entire attack lifecycle, know, anticipate, stop.

Request the Report Explore the 4 services
24·7·365European SOC team
<30 minMedian containment
287Adversary groups & tools
Operational stack · Live STK-26 · Fortgale Outpost
01SOC24·7·365 · L2/L3 analystsActive
02MDRManaged Detection & ResponseActive
03CTIProprietary intelligence · 287 tools and actorsActive
04AdvisoryNIS2 · DORA · vCISO · board-readyActive
Outpost · continuous cycle Uptime · 99.98 %
Compliance · accreditations
ISO/IEC 27001
ISO 9001
ISO 14001
ISO 45001
NIS2 ready
DORA aligned
GDPR · ENISA
The services · operational stack

Four operational functions, one outpost.

Each service has a dedicated page with architecture, runbooks and integrations. Pick the angle you need from here, or talk directly with our analysts.

Service · 01

Security Operations Center

European SOC team manned 24·7·365 by our L2/L3 analysts. Triage, escalation and incident handling on European business hours, with decision authority.

  • L1 · L2 · L3 analysts in Europe, European business hours
  • AI-native tier-zero, automatic triage before the analyst
  • Board-ready reporting, metrics, SLAs, posture
Go to the SOC service →
Service · 02

Managed Detection & Response

Managed detection and response across endpoint, identity, cloud and network. Containment in minutes, not weeks. Intel-driven, mapped on MITRE ATT&CK.

  • EDR · NDR · IDR · CDR, multi-domain detection
  • Assisted remote response, host isolation, kill, rollback
  • Proactive threat hunting · live runbooks per actor
Go to the MDR service →
Service · 03

Cyber Threat Intelligence

Proprietary intelligence on the 287 tools and actors targeting European markets. We don't resell third-party feeds, we produce our own CTI, observed from the dark web.

  • 287 tools and actors profiled, Reports, TTPs, campaigns
  • 34k+ IoCs/week · 72h median early-warning
  • Monthly threat briefing signed by our analysts
Go to the CTI service →
Service · 04

Cybersecurity Advisory

Board-ready posture, not slideware technology. Risk assessment, NIS2/DORA readiness, tabletops on real adversaries, vCISO, live runbooks, not 2023 PDFs.

  • NIS2 · DORA readiness, gap analysis + remediation path
  • Tabletops on real adversaries active in your sector
  • vCISO · cyber governance, board reporting
Go to the Advisory service →
Specialised services · 4 operational domains

Eight vertical defences, four coverage domains.

Beyond the core stack, eight specialised services cover the four operational domains of modern cybersecurity: identity, phishing, network & OT, systems & applied intelligence.

Identity

Identity Protection · ITDR

AD on-prem, Entra ID, Cloud. Detection of Kerberoasting, DCSync, Pass-the-Hash, MFA bypass.

Discover →

Zero Trust

NIST SP 800-207. Vendor-agnostic 6-phase roadmap: identity, device, network, app, data, maturity.

Discover →
Phishing

Enterprise Phishing

Combined Interceptor + ITDR hub. Pre- and post-compromise defence on M365 and Google.

Discover →

AiTM Phishing · Interceptor

Block AiTM (Evilginx, Modlishka) before credentials are entered. Free activation.

Discover →
Network & OT

C2 Tracking

800+ active CobaltStrike servers tracked. Watermark, beacon config, attacker attribution.

Discover →

OT Security

SCADA, PLC, DCS, HMI. Passive Modbus/Profinet/DNP3 monitoring. Zero operational impact.

Discover →
Systems & Intel

Ransomware Protection

Pre-encryption detection. 12+ gangs tracked (LockBit, BlackCat, Cl0p). On-site IR in Europe.

Discover →

Intelligence Feed

34k+ IoCs per week via STIX/TAXII. Phishing, C2, malware, ransomware. SIEM-ready.

Discover →
Fortgale Defence Platform · customer portal

One portal, one access.

The Fortgale Defence Platform is the portal where the Fortgale team and the customer work on the same case: defence, intelligence and modules in a single access.

Cyber Defence

Cyber Defence

Defence run by the analysts, visible in the portal.

  • MDR and SOC
  • SIEM Monitoring
  • Defence Map
Discover the platform →
Cyber Threat Intelligence

Cyber Threat Intelligence

Intelligence applied to the customer's context.

  • Contextual and Advanced Intelligence
  • AI Assistant
  • Digital Risk Protection
Discover the platform →
Modules

Modules

Additional features the customer can activate.

  • Exposure and Compliance
  • Deception and Cloud Posture
  • Identity Exposure, Network Security, Attack Simulation
Discover the platform →
Proof · outpost metrics

Four numbers that hold the outpost up.

No claim without evidence. These are the integrated metrics across the four services, updated quarterly.

287
Adversaries profiled
targeting European markets
34k+
Indicators of compromise
produced per week
<30 min
Median containment
from confirmed alert
72 h
Median early-warning
before impact
For whom · two angles

Same intelligence, two angles of decision.

The same outpost produces different evidence for those who decide on risk and those who decide on runbooks.

For the CISO

Named cyber posture, not declared.

A CISO doesn't decide on the basis of "Qualified analysts respond 24/7". They decide on the basis of who attacks, how, with what impact and which runbook.

  • Quarterly threat briefingProfile of the 287 tools and actors active in your sector, with observed TTPs and campaigns in progress.
  • Measured NIS2 / DORA readinessVerifiable gap analysis, not a checklist to fill in.
  • Board-ready reportingRisk · impact · decision. No slideware technology.
Request the threat briefing →
For the IT lead

A living outpost, not a 2023 PDF.

The IT lead evaluates on real runbooks, documented response times, zero handover translators between products, integration with the stack already in use.

  • European SOC 24·7·365L2/L3 analysts with mandate to decide. Median containment <30 min from confirmed alert.
  • Live runbooks, MITRE-mappedPer actor and per TTP. They update with the adversary, not with each audit.
  • AI-native tier-zeroAutomatic triage before the analyst. Cuts noise, not human decision.
See a real runbook →
Talk to the outpost

One meeting. One NDA. One conversation with our analysts.

No funnel, no generic demo. We bring you a Report built for your sector and analysts with a mandate to decide.

Response time: < 1 business day.