Estonia · English
Cybersecurity audit and penetration testing in Estonia
Written-authorisation audits, targeted penetration tests and NIS2/CRA evidence for teams that need a clear answer, not another scanner report.
- Written authorisationTargets and limits agreed first
- Human-reviewedFindings checked before reporting
- Evidence-readyNIS2, CRA and customer requests
What we do
Tehisabiline OÜ is an Estonian cybersecurity company. We audit and test systems only with the owner's written permission, and every material finding is reviewed by a human before it reaches the report.
Services
Why a local team
Estonian rules, Estonian-language evidence and a practical understanding of RIA, E-ITS and local procurement expectations. We say what we can test, what we cannot, and where another specialist is needed.
English regulation guides
How a project starts
- Scope: systems, targets, time window and prohibited actions.
- Authorisation: signed permission and emergency contact.
- Testing: automated checks plus human validation.
- Report: evidence, impact, fixes and a retest option.
Frequently asked questions
Do you test systems outside Estonia?
The company is based in Estonia. Remote scoping and testing can cover systems elsewhere when authorisation, law and data-handling requirements allow it; the scope is agreed in writing first.
Is a penetration test the same as an audit?
No. A penetration test actively tests an agreed target for exploitable weaknesses. An audit reviews a wider set of controls, evidence and processes. They can complement each other.
Can you certify NIS2 or ISO 27001 compliance?
No. We can prepare evidence, test controls and review gaps. Certification is issued by an accredited body, and NIS2 compliance remains a supervisory assessment.
How is authorisation handled?
Testing starts only after written authorisation from the system owner, with agreed targets, time windows, prohibited actions and an emergency contact.
Need a scoped answer?
Email the system type, target count, deadline and whether you already have written authorisation. We will say whether an audit or a test is the right first step.
Email tehisabiline@gmail.comWe reply in English or Estonian. No automated scanner report and no testing without permission.