From a free initial assessment to advanced regulatory compliance evaluations. Every good cybersecurity strategy starts by knowing, with evidence, where you stand.
Assessments are Araucaria’s consultative entry point into cybersecurity. We don’t sell fear or generic vulnerability lists — we deliver real, prioritized, actionable visibility.
An honest first look at your public exposure: a brief posture survey plus a non-invasive review of open sources (OSINT) about your domain. The ideal entry point if you’ve never done a formal evaluation.
Includes: Simplified survey · OSINT audit of your main domain (with Heimdall Cyberposture CLI) · 5 to 10 immediate prioritized recommendations.
For medium-sized SMEs without their own security team who want to go beyond the initial assessment. An advanced 84-question survey based on NIST CSF 2.0, correlation with actively exploited vulnerabilities, up to 15 prioritized recommendations, and a results presentation meeting.
Who it’s for: Companies with no prior formal cybersecurity evaluation.
For companies with significant digital surface: SaaS, APIs, mobile apps, or multiple domains. Adds social media reconnaissance, basic dark web monitoring, threat intelligence, and full threat modeling (STRIDE + DREAD).
Who it’s for: Mid-size companies with exposed digital assets, without a dedicated security team.
For Vital Importance Operators (OIV) or providers with contractual obligations under the Cybersecurity Framework Law. Everything in N2, plus a full gap analysis of the Regulatory Compliance function and audit-ready evidence for Chile’s National Cybersecurity Agency.
Who it’s for: Designated OIVs and providers with regulatory obligations under Ley 21.663.
The next step when your organization has SaaS, mobile apps, or APIs that need to go beyond OSINT: web application pentesting, white-box audits (OWASP ASVS), API pentesting, mobile audits, and basic Red Team — coordinated by Araucaria alongside our network of specialized technical partners.
Who it’s for: Organizations with SaaS, mobile apps, or APIs that require offensive testing.
An assessment is a snapshot in time. If you’ve already completed your evaluation and want to keep the momentum without jumping straight to a full managed service, we offer a monthly continuity advisory: periodic posture follow-up, support implementing the prioritized recommendations.
Available after a level 1 assessment. Periodic follow-up on the most urgent recommendations.
Available after a level 2 assessment. Frequent support aligned to your full digital surface.
Available after a level 3 or AppSec assessment. Focus on continuous regulatory evidence.
What it is
Continuous dark web surveillance — underground forums, illicit marketplaces, and encrypted channels — detecting information about your organization before it’s used against you.
What we monitor
What value it delivers
Does your need grow beyond periodic follow-up? The next step is our full Managed Cyberdefense →
We deliver a free report based on your answers to a short survey and a non-invasive review of public sources about your domain — no installation, no commitment.
You can choose one option, or both — whatever works best for you.
Already did your assessment and want to move from assessment to 24/7 continuous operation?
Explore Managed Defense