{
  "count": 7,
  "services": [
    {
      "id": "web-pentest",
      "category": "penetration-testing",
      "name": {
        "en": "Web Application Penetration Testing",
        "pl": "Testy penetracyjne aplikacji webowych"
      },
      "summary": {
        "en": "Manual and tool-assisted penetration testing of web applications following OWASP standards, with a detailed security assessment and an actionable remediation plan.",
        "pl": "Manualne i wspomagane narzędziami testy penetracyjne aplikacji webowych zgodne ze standardami OWASP, zakończone szczegółowym raportem i planem naprawczym."
      },
      "standards": [
        "OWASP Top 10",
        "OWASP Web Security Testing Guide"
      ],
      "deliverables": {
        "en": [
          "Technical findings report",
          "Risk-rated vulnerability list",
          "Remediation plan",
          "Retest"
        ],
        "pl": [
          "Raport techniczny",
          "Lista podatności z oceną ryzyka",
          "Plan naprawczy",
          "Retest"
        ]
      },
      "urls": {
        "en": "https://dsecure.me/en/web-pentest/",
        "pl": "https://dsecure.me/pl/web-pentest/"
      }
    },
    {
      "id": "mobile-pentest",
      "category": "penetration-testing",
      "name": {
        "en": "Mobile Application Penetration Testing",
        "pl": "Testy penetracyjne aplikacji mobilnych"
      },
      "summary": {
        "en": "iOS and Android security testing covering data storage, transport security, reverse engineering resistance and platform misuse.",
        "pl": "Testy bezpieczeństwa iOS i Android obejmujące przechowywanie danych, bezpieczeństwo transmisji, odporność na reverse engineering i nadużycia platformy."
      },
      "standards": [
        "OWASP MASVS",
        "OWASP Mobile Security Testing Guide"
      ],
      "deliverables": {
        "en": [
          "MASVS-mapped findings report",
          "Risk-rated vulnerability list",
          "Remediation plan",
          "Retest"
        ],
        "pl": [
          "Raport zgodny z MASVS",
          "Lista podatności z oceną ryzyka",
          "Plan naprawczy",
          "Retest"
        ]
      },
      "urls": {
        "en": "https://dsecure.me/en/mobile-pentest/",
        "pl": "https://dsecure.me/pl/mobile-pentest/"
      }
    },
    {
      "id": "api-pentest",
      "category": "penetration-testing",
      "name": {
        "en": "API Penetration Testing",
        "pl": "Testy penetracyjne API"
      },
      "summary": {
        "en": "Security testing of REST, GraphQL and SOAP APIs, focused on broken authorization, excessive data exposure and unauthorised access to data.",
        "pl": "Testy bezpieczeństwa API REST, GraphQL i SOAP, skupione na błędach autoryzacji, nadmiernej ekspozycji danych i nieautoryzowanym dostępie."
      },
      "standards": [
        "OWASP API Security Top 10"
      ],
      "deliverables": {
        "en": [
          "API findings report",
          "Authorization matrix review",
          "Remediation plan",
          "Retest"
        ],
        "pl": [
          "Raport z testów API",
          "Przegląd macierzy autoryzacji",
          "Plan naprawczy",
          "Retest"
        ]
      },
      "urls": {
        "en": "https://dsecure.me/en/api-pentest/",
        "pl": "https://dsecure.me/pl/api-pentest/"
      }
    },
    {
      "id": "llm-pentest",
      "category": "penetration-testing",
      "name": {
        "en": "LLM and AI Application Security Testing",
        "pl": "Testy bezpieczeństwa aplikacji LLM i AI"
      },
      "summary": {
        "en": "Security testing for LLM-powered applications, chatbots and AI agents, covering prompt injection, data leakage, tool misuse and other AI-specific vulnerabilities.",
        "pl": "Testy bezpieczeństwa aplikacji opartych na LLM, chatbotów i agentów AI, obejmujące prompt injection, wyciek danych, nadużycie narzędzi i inne podatności specyficzne dla AI."
      },
      "standards": [
        "OWASP Top 10 for LLM Applications"
      ],
      "deliverables": {
        "en": [
          "LLM findings report",
          "Prompt injection test cases",
          "Guardrail recommendations",
          "Retest"
        ],
        "pl": [
          "Raport z testów LLM",
          "Przypadki testowe prompt injection",
          "Rekomendacje zabezpieczeń",
          "Retest"
        ]
      },
      "urls": {
        "en": "https://dsecure.me/en/llm-pentest/",
        "pl": "https://dsecure.me/pl/llm-pentest/"
      }
    },
    {
      "id": "threat-modelling",
      "category": "advisory",
      "name": {
        "en": "Threat Modelling",
        "pl": "Modelowanie zagrożeń"
      },
      "summary": {
        "en": "Structured threat modelling that identifies security risks at design time, before they become vulnerabilities in production.",
        "pl": "Ustrukturyzowane modelowanie zagrożeń identyfikujące ryzyka na etapie projektowania, zanim staną się podatnościami w produkcji."
      },
      "standards": [
        "STRIDE",
        "PASTA",
        "OWASP"
      ],
      "deliverables": {
        "en": [
          "Data flow diagrams",
          "Ranked threat catalogue",
          "Mitigation backlog"
        ],
        "pl": [
          "Diagramy przepływu danych",
          "Uszeregowany katalog zagrożeń",
          "Backlog działań naprawczych"
        ]
      },
      "urls": {
        "en": "https://dsecure.me/en/threat-modelling/",
        "pl": "https://dsecure.me/pl/threat-modelling/"
      }
    },
    {
      "id": "consulting",
      "category": "advisory",
      "name": {
        "en": "Cybersecurity and IT Consulting",
        "pl": "Konsulting cyberbezpieczeństwa i IT"
      },
      "summary": {
        "en": "Security audits, GDPR compliance work and risk analysis delivered by certified consultants.",
        "pl": "Audyty bezpieczeństwa, zgodność z RODO i analiza ryzyka prowadzone przez certyfikowanych konsultantów."
      },
      "standards": [
        "GDPR / RODO",
        "ISO 27001-aligned practice"
      ],
      "deliverables": {
        "en": [
          "Security audit report",
          "Compliance gap analysis",
          "Risk register"
        ],
        "pl": [
          "Raport z audytu bezpieczeństwa",
          "Analiza luk zgodności",
          "Rejestr ryzyk"
        ]
      },
      "urls": {
        "en": "https://dsecure.me/en/consulting/",
        "pl": "https://dsecure.me/pl/consulting/"
      }
    },
    {
      "id": "custom-solutions",
      "category": "advisory",
      "name": {
        "en": "Custom Security Solutions",
        "pl": "Dedykowane rozwiązania bezpieczeństwa"
      },
      "summary": {
        "en": "Tailored engagements: security architecture design, DevSecOps enablement, custom tooling and virtual CISO support.",
        "pl": "Dedykowane wsparcie: projektowanie architektury bezpieczeństwa, DevSecOps, budowa narzędzi oraz usługa wirtualnego CISO."
      },
      "standards": [
        "DevSecOps",
        "Secure SDLC"
      ],
      "deliverables": {
        "en": [
          "Security architecture design",
          "Pipeline integration",
          "Ongoing advisory"
        ],
        "pl": [
          "Projekt architektury bezpieczeństwa",
          "Integracja z pipeline",
          "Stałe doradztwo"
        ]
      },
      "urls": {
        "en": "https://dsecure.me/en/custom-solutions/",
        "pl": "https://dsecure.me/pl/custom-solutions/"
      }
    }
  ]
}
