jannis.re

What It Is

jannis.re is the personal website of security researcher Jannis Kirschner. Its content mainly showcases his vulnerability research, industry projects, CTF results, talks, publications, certifications, and media coverage. It is not a standard SaaS or security product page; it is closer to a personal expert brand and consulting capability profile. The site indicates that he has been involved in discovering vulnerabilities in Switzerland’s e-voting system, disclosing a high-risk vulnerability chain in WiFi routers, responding to malvertising campaigns, and working with critical infrastructure, government, automotive R&D, education, and cybersecurity service providers.

Core Capabilities and Dimensions

In terms of protection coverage, the profile spans vulnerability research, penetration testing, code review, security audits, phishing assessments, cloud and software security program development, threat hunting, cyber investigations, and security training. Deployment is not described in a productized way; it appears to be more project-based consulting, audits, training, speaking engagements, and open-source tool delivery. On compliance, the text mentions that he built and led cloud and software security initiatives in critical infrastructure, increasing coverage of implemented ISO27001 controls by 300%. His personal certifications include CISSP, CISM, eCTHPv2, Cisco CyberOps Associate, and others, providing strong professional credibility.

Pricing and Commercial Transparency

The website does not disclose pricing, payment methods, service packages, SLAs, response times, or contract models, so procurement cost and service guarantees cannot be assessed. For enterprise customers looking to purchase penetration testing or security consulting, further discussion via LinkedIn or email would be needed to clarify scope, deliverables, timeline, and responsibility boundaries.

Pros and Cons

The main strengths are the quality of the public case references, which involve national-level e-voting, critical infrastructure, and large-scale user impact. He also has experience in CTF competitions, research publication, public speaking, and training, making him suitable for complex technical security problems. The downside is that the website reads more like a résumé than a vendor page, with limited information on team size, delivery methodology, sample reports, support mechanisms, or localization. It is therefore not suitable for completing a standard vendor procurement evaluation on its own.

Best Fit and Access from China

It is best suited to mid-sized and large organizations that need high-level vulnerability research, red team/penetration testing, cloud security architecture advice, or security training, especially those operating critical systems or R&D-heavy environments. Access from China, payment methods, and Chinese-language support are not specified and should be treated as unknown. If local compliance, invoicing, on-site delivery, or Chinese-language deliverables are required, domestic providers such as Qi An Xin, DBAPPSecurity, NSFOCUS, and Venustech may be worth comparing; international alternatives include NCC Group, Trail of Bits, and Bishop Fox.