Proprietary intelligence
The 287 tools and actors profiled and the 34k+ IoCs/week from our CTI are natively integrated in the console. Every alert has a name, not just a code.
A cyber defense outpost in four operational angles.
SOC, MDR, Cyber Threat Intelligence, Advisory. Not separate modules. Four angles of a single outpost designed along the entire attack lifecycle, know, anticipate, stop.
Operational stack · Live STK-26 · Fortgale Outpost
01SOC24·7·365 · L2/L3 analystsActive
02MDRManaged Detection & ResponseActive
03CTIProprietary intelligence · 287 tools and actorsActive
04AdvisoryNIS2 · DORA · vCISO · board-readyActive
Compliance · accreditations
ISO/IEC 27001
ISO 9001
ISO 14001
ISO 45001
NIS2 ready
DORA aligned
GDPR · ENISA
The services · operational stack
Four operational functions, one outpost.
Each service has a dedicated page with architecture, runbooks and integrations. Pick the angle you need from here, or talk directly with our analysts.
Service · 01
Security Operations Center
European SOC team manned 24·7·365 by our L2/L3 analysts. Triage, escalation and incident handling on European business hours, with decision authority.
- L1 · L2 · L3 analysts in Europe, European business hours
- AI-native tier-zero, automatic triage before the analyst
- Board-ready reporting, metrics, SLAs, posture
Service · 02
Managed Detection & Response
Managed detection and response across endpoint, identity, cloud and network. Containment in minutes, not weeks. Intel-driven, mapped on MITRE ATT&CK.
- EDR · NDR · IDR · CDR, multi-domain detection
- Assisted remote response, host isolation, kill, rollback
- Proactive threat hunting · live runbooks per actor
Service · 03
Cyber Threat Intelligence
Proprietary intelligence on the 287 tools and actors targeting European markets. We don't resell third-party feeds, we produce our own CTI, observed from the dark web.
- 287 tools and actors profiled, Reports, TTPs, campaigns
- 34k+ IoCs/week · 72h median early-warning
- Monthly threat briefing signed by our analysts
Service · 04
Cybersecurity Advisory
Board-ready posture, not slideware technology. Risk assessment, NIS2/DORA readiness, tabletops on real adversaries, vCISO, live runbooks, not 2023 PDFs.
- NIS2 · DORA readiness, gap analysis + remediation path
- Tabletops on real adversaries active in your sector
- vCISO · cyber governance, board reporting
Specialised services · 4 operational domains
Eight vertical defences, four coverage domains.
Beyond the core stack, eight specialised services cover the four operational domains of modern cybersecurity: identity, phishing, network & OT, systems & applied intelligence.
Identity
Identity Protection · ITDR
AD on-prem, Entra ID, Cloud. Detection of Kerberoasting, DCSync, Pass-the-Hash, MFA bypass.
Discover →Zero Trust
NIST SP 800-207. Vendor-agnostic 6-phase roadmap: identity, device, network, app, data, maturity.
Discover →Phishing
Enterprise Phishing
Combined Interceptor + ITDR hub. Pre- and post-compromise defence on M365 and Google.
Discover →AiTM Phishing · Interceptor
Block AiTM (Evilginx, Modlishka) before credentials are entered. Free activation.
Discover →Cyber Defence Platform · operational console
One console, three engines.
The Cyber Defence Platform is Fortgale's proprietary engine: it unifies intelligence, automation and AI into a single cyber console for CISOs, IT Managers and security leaders. Not a customised third-party product, built around our CTI.
Tier-zero automation
Live runbooks, host isolation in seconds, automatic triage that precedes the analyst. Automation does not replace the decision: it accelerates it.
Multi-domain AI-native
AI correlation across endpoint, identity, cloud and network against the actor's TTPs. Cuts noise by over 90%. The analyst decides on what matters.
Fortgale · Cyber Defence Platform
Live · EU outpost
Events · 24h
142,380
Real alerts
11
Contained
9
MTTR
11m
Uptime
99.98%
Intelligence · emerging adversaries 287 profiled
LockBit 4.0+12 · 72h
Scattered SpiderActive
Cl0pCampaign
Detection stream · live AI-triaged
TimeSevDetectionStageAn.
10:42HighValid accounts · MFA bypass on VPNSeniorLB
10:31CritCl0p · 0-day file transfer detectedContainedMR
10:18MedPhishing · manufacturing mail clusterContainedAI
09:55MedLat. movement · anomalous RDPAI triageAI
Automation · tier-zero 7d 912,450 events
98.4 %
Auto-classified
0
Escalated FPs
~8 s
Host isolation
Proof · outpost metrics
Four numbers that hold the outpost up.
No claim without evidence. These are the integrated metrics across the four services, updated quarterly.
287
Adversaries profiled
targeting European markets
targeting European markets
34k+
Indicators of compromise
produced per week
produced per week
<30 min
Median containment
from confirmed alert
from confirmed alert
72 h
Median early-warning
before impact
before impact
For whom · two angles
Same intelligence, two angles of decision.
The same outpost produces different evidence for those who decide on risk and those who decide on runbooks.
For the CISO
Named cyber posture, not declared.
A CISO doesn't decide on the basis of "Qualified analysts respond 24/7". They decide on the basis of who attacks, how, with what impact and which runbook.
- Quarterly threat briefingProfile of the 287 tools and actors active in your sector, with observed TTPs and campaigns in progress.
- Measured NIS2 / DORA readinessVerifiable gap analysis, not a checklist to fill in.
- Board-ready reportingRisk · impact · decision. No slideware technology.
For the IT lead
A living outpost, not a 2023 PDF.
The IT lead evaluates on real runbooks, documented response times, zero handover translators between products, integration with the stack already in use.
- European SOC 24·7·365L2/L3 analysts with mandate to decide. Median containment <30 min from confirmed alert.
- Live runbooks, MITRE-mappedPer actor and per TTP. They update with the adversary, not with each audit.
- AI-native tier-zeroAutomatic triage before the analyst. Cuts noise, not human decision.
Talk to the outpost
One meeting. One NDA. One conversation with our analysts.
No funnel, no generic demo. We bring you a Report built for your sector and analysts with a mandate to decide.