Cybersecurity consulting | Sweden
Senior security expertise. Without the enterprise overhead.
We find the weaknesses in your identity, cloud and on-premise environment, and help you meet ISO 27001 and CIS Controls. Fixed scope, fixed price, delivered by the consultant you talk to.
Microsoft 365 and Entra security assessment
- 01MFA, Conditional Access, privileged roles and PIM
- 02Identity lifecycle, guest access and app governance
- 03Optional on-premise Active Directory risk review
Services
Six things we do, and do well
Every engagement ends with a written report, a prioritised action list and a walkthrough with your team.
Forensic audits
After a suspected account compromise or email fraud, we establish what happened, what was accessed and how to close the gap. Documented for management, insurers and auditors.
Request an audit 02Penetration testing
Web applications, customer portals and your external attack surface. Findings ranked by real risk, with a retest included to verify the fixes.
Scope a test 03Microsoft 365 and Entra security
Identity and access review, Conditional Access, Intune and Exchange hardening. Scripted, repeatable and measured against CIS benchmarks.
Assess your tenant 04Compliance: ISO 27001 and CIS Controls
Gap analysis, risk assessment and a practical roadmap. Policies and evidence that hold up in an audit, not shelfware.
Start with a gap analysis 05Exposure and vulnerability management
Continuous scanning, patch governance and monitoring for leaked credentials and infostealer data tied to your domains.
See your exposure 06Security operations and IT support
Hour-bank support, key-person backup for your IT lead, Active Directory reviews and patch management. Senior help when you need it.
Ask about an hour bankExample engagement
Entra ID identity and access assessment
A recent assessment for a Nordic organisation running hybrid Active Directory and Microsoft 365. Client details are anonymised.
Entra ID IAM controls
MFA coverage including break-glass accounts, Conditional Access, legacy authentication and privileged roles.
Identity lifecycle
Joiner, mover and leaver processes, unlicensed and stale accounts, self-service reset and MFA registration.
Access governance
Role model and least privilege, PIM and just-in-time elevation, guest and cross-tenant access, app roles.
Control validation
Session hijacking resilience, admin portal restrictions, password protection and identity threat detection.
On-premise AD
Tiering, privileged groups, compromised and duplicated passwords, Kerberoasting and delegation risks.
How it is done
Sample findings
Register two FIDO2 keys and store them in separate secure locations.
Move to an eligible PIM assignment with approval and expiry.
Remediate flagged users, then enforce the Conditional Access policy.
Restrict cross-tenant defaults to trusted organisations.
App permission requests need approval from two named reviewers.
Why Vernda
Big-firm methods. Small-firm attention.
Senior only
The consultant on the scoping call is the one doing the work. No hand-off to juniors.
Fixed scope, fixed price
You get a written quote before we start. No open-ended hourly billing.
Nordic presence
Offices in Stockholm. Onsite in the Nordics, remote across Europe.
Reports people can use
Written in Swedish or English, with an executive summary for management and technical detail for IT.
Contact
Book a 30-minute security briefing
No cost, no sales pitch. Tell us what worries you and we will tell you honestly whether we can help, and what it would cost.