corsec-gmbh.ch

What It Is

Pilatum IT Security Services GmbH is a cybersecurity services provider based in Baar, Switzerland. Its website presents two service lines under PILATUM, COR SEC and T HACK TICAL: the former focuses more on security operations, risk management, and compliance, while the latter centers on technical consulting, ethical hacking, penetration testing, and red teaming. Rather than offering a single security product, Pilatum positions itself as a consulting, assessment, and offensive/defensive validation partner for enterprises.

Core Capabilities and Protection Areas

In terms of protection coverage, Pilatum spans security operations process design, SOC detection use cases, MSSP assessments, business continuity, security management, web and mobile application audits, cybersecurity assessments, code reviews, security orchestration, threat hunting, incident response, purple teaming, and training. Its technical audits explicitly reference methodologies such as OSSTMM, OWASP WSTG, and OWASP MSTG, suggesting a stronger emphasis on professional manual assessment rather than automated scanning tools. For management and alerting, the focus is on improving SOC capabilities across detection, triage, response, and post-incident review, with detection measures designed around business risk.

Deployment, Compliance, and Integration

Pilatum is not presented as a SaaS or hardware product; its offering is primarily project-based consulting and security services. The site mentions enhancing security orchestration through IRP/SOAR platforms, but does not indicate that Pilatum provides its own platform. On compliance, its services can help enterprises design or implement security strategies and controls around ISO 27001, GDPR, and PCI-DSS, and it also covers cyber risk assessments for the maritime industry under IMO Resolution MSC.428(98). Its integration capability is mainly reflected in assessments of third-party MSSPs, SOC as a Service providers, EDR, and log management services, as well as vendor-neutral recommendations.

Pricing, Pros, and Cons

The official website does not disclose pricing, packages, delivery timelines, or SLAs, so quotes are likely provided based on project scope. Its strengths include collaboration between consulting and offensive security teams, coverage across governance, operations, and real-world validation, and an emphasis on independence and vendor neutrality. It also provides a PGP public key, indicating good awareness of secure communication. The drawbacks are the lack of public customer cases, team credentials, sample reports, and clear service boundary descriptions; before purchasing, buyers should further verify delivery methodology, report depth, supported languages, and response times.

Best Fit and Access from China

Pilatum is better suited to medium and large enterprises that already have a certain level of IT and security maturity and need SOC improvement, compliance implementation, offensive/defensive assessment, or incident response support, as well as organizations with maritime compliance requirements. Access from China and payment methods are not disclosed, so they should be considered unknown. For cross-border procurement, buyers should pay attention to contracts, invoicing, authorization for remote testing, cross-border data transfer, and time zone communication. If a localized alternative is needed, Chinese security service providers such as 启明星辰, 绿盟, 奇安信, 安恒, and 深信服 may be evaluated.