# Audax Cybersecurity

> Audax Cybersecurity is a Greek offensive-security firm (Athens, founded 2017) that proves — with technical evidence, not checklists — how resilient an organization is against real adversaries. Core services: penetration testing, red teaming, adversary validation, and continuous threat exposure management (CTEM) delivered via the proprietary Erevos AI engine, with direct value for NIS2 and DORA compliance.

Serving businesses and public organizations across Greece and Europe. 9+ years of experience, 90+ technical assessment projects, certified operators (OSCP, CEH). Every engagement delivers documented attack paths, a prioritized remediation roadmap, and executive + technical reporting. This file summarizes the site for LLMs and AI agents. Language: primarily Greek. Contact: info@audax.gr · +30 210 9839367 · Athens, Greece.

## Core
- [Homepage](https://www.audax.gr/): Offensive Security & Penetration Testing that prove your resilience against NIS2, DORA and real adversaries.
- [Services overview](https://www.audax.gr/services/): All cybersecurity services — offensive testing, adversary validation, CTEM, compliance.
- [Erevos AI](https://www.audax.gr/erevos-ai/): Audax's proprietary offensive engine — the annual, managed CTEM (Continuous Threat Exposure Management) service (a service, not a SaaS product).

## Offensive Security services
- [Offensive Security Services (pillar)](https://www.audax.gr/services/offensive-security-services/): penetration testing, red teaming, offensive assessments.
- [Web, API & Mobile Penetration Testing](https://www.audax.gr/services/offensive-security-services/web-api-mobile-penetration-testing/)
- [External & Internal Infrastructure Penetration Testing](https://www.audax.gr/services/offensive-security-services/external-internal-infrastructure-penetration-testing/)
- [Active Directory & Cloud Security Assessment](https://www.audax.gr/services/offensive-security-services/active-directory-cloud-assessment/)
- [Red Team & Social Engineering](https://www.audax.gr/services/offensive-security-services/red-team-social-engineering/)
- [AI Phishing Simulations](https://www.audax.gr/services/offensive-security-services/ai-phishing-simulations/): AI-driven phishing/human-risk simulations powered by Erevos AI (MITRE ATT&CK T1566).

## Adversary Validation services
- [Adversary Validation Services (pillar)](https://www.audax.gr/services/adversary-validation-services/): validate whether your SOC/SIEM/EDR actually detect real adversaries.
- [Purple Teaming & Detection Validation](https://www.audax.gr/services/adversary-validation-services/purple-teaming-detection-validation/)
- [SOC, SIEM & EDR Effectiveness Assessment](https://www.audax.gr/services/adversary-validation-services/soc-siem-edr-effectiveness/)
- [Ransomware Readiness Simulation](https://www.audax.gr/services/adversary-validation-services/ransomware-readiness-simulation/)
- [ATT&CK Emulation & Attack-Path Validation](https://www.audax.gr/services/adversary-validation-services/attck-emulation-attack-path-validation/)

## Continuous Threat Exposure Management (CTEM)
- [Continuous Exposure Management (pillar)](https://www.audax.gr/services/continuous-exposure-management/): delivered as the annual managed Erevos AI CTEM service.
- [Continuous Attack Surface Mapping](https://www.audax.gr/services/continuous-exposure-management/continuous-attack-surface-mapping/)
- [Exposure Drift & Emerging-Threat Monitoring](https://www.audax.gr/services/continuous-exposure-management/exposure-drift-emerging-threat/)
- [Attack-Path Engine & Prioritization](https://www.audax.gr/services/continuous-exposure-management/attack-path-engine-prioritization/)
- [Risk-Based Remediation & Retesting](https://www.audax.gr/services/continuous-exposure-management/risk-based-remediation-retesting/)

## Other services
- [Email Security Cloud](https://www.audax.gr/email-security-cloud/): managed cloud email gateway & domain protection — SPF/DKIM/DMARC, anti-phishing, domain spoofing protection, mailbox audit & incident response.
- [Threat-Informed Emulation](https://www.audax.gr/services/threat-informed-emulation/): controlled reproduction of specific APT actors' TTPs (MITRE ATT&CK).
- [Cloud Security Assessment](https://www.audax.gr/services/cloud-security-assessment/)
- [Vulnerability Management & Validation](https://www.audax.gr/services/vulnerability-management-validation/)

## Compliance (NIS2 & DORA)
- [NIS2 & DORA Compliance](https://www.audax.gr/nis2-dora-compliance/): technical proof of resilience that supports your compliance file (Audax is not a certification body).
- [DORA Compliance](https://www.audax.gr/dora-compliance/): financial-sector focus, Threat-Led Penetration Testing (TLPT).

## Threat Intelligence
- [APT Intelligence library](https://www.audax.gr/apt-intelligence/): open, searchable library of 177 threat-actor profiles mapped to MITRE ATT&CK (targeted sectors, malware/tooling, related CVEs).
- [APT Groups & research](https://www.audax.gr/apt-groups/): individual threat-actor profiles and data studies (e.g. the Greek & EU Threat Landscape 2026 data study).

## Labs (hands-on offensive research)
- [Cybersecurity Labs (hub)](https://www.audax.gr/labs/): practical, evidence-based reviews of offensive-security tools & techniques (real isolated lab, real execution, MITRE ATT&CK).
- [MCP Security Hub — AI & offensive security](https://www.audax.gr/labs/mcp-security-hub-ai-offensive-security/)
- [CAI (Cybersecurity AI) — autonomous AI offensive agents](https://www.audax.gr/labs/cai-ai-agents-offensive-security-review/)
- [Attack Surface Management with OASM (open source)](https://www.audax.gr/labs/attack-surface-management-oasm-review/)
- [Burp Suite on Kali Linux — Part 1: install & proxy](https://www.audax.gr/labs/burp-suite-kali-linux-part-1/)
- [Burp Suite on Kali Linux — Part 2: Repeater, Intruder, Decoder](https://www.audax.gr/labs/burp-suite-kali-linux-part-2/)
- [Burp Suite on Kali Linux — Part 3: Scope, Session Handling, CSRF](https://www.audax.gr/labs/burp-suite-kali-linux-part-3/)
- [Burp Suite on Kali Linux — Part 4: Sequencer & entropy analysis](https://www.audax.gr/labs/burp-suite-kali-linux-part-4/)

## Use cases (anonymized sector scenarios)
- [Offensive Use Cases (hub, 70+ scenarios)](https://www.audax.gr/offensive-use-cases/): sector-based offensive-security scenarios translating technical findings into business risk.
- [Erevos AI Use Cases (hub)](https://www.audax.gr/erevosai-use-cases/): CTEM / Erevos AI scenarios by sector.

## Sector & comparison
- [Public-Sector Cybersecurity](https://www.audax.gr/dimosioi-organismoi/): offensive security & CTEM for Greek public organizations.
- [Expert-led offensive security vs standalone tools](https://www.audax.gr/sygkritikos-pinakas-me-alles-platformes/): why an expert-led program beats point tools/platforms.

## Company
- [About Audax](https://www.audax.gr/i-etaireia/)
- [Founder & CEO — Theofanis Kasimis](https://www.audax.gr/kasimis-theofanis-founder-and-ceo/): OSCP-certified offensive security professional, author of a Greek Ethical Hacking book.
- [Clients / Trusted by](https://www.audax.gr/i-etaireia/mas-empistevontai/)
- [Distinctions, media & talks](https://www.audax.gr/diakriseis/)
- [Media & Press kit](https://www.audax.gr/media-press/): boilerplate, key facts, spokesperson, brand assets for journalists.

## Contact
- [Contact](https://www.audax.gr/epikoinwnia/): Athens, Greece · +30 210 9839367 · info@audax.gr