corsec-maritime.ch

What It Is

Pilatum IT Security Services GmbH is a cybersecurity services provider based in Baar, Switzerland. Its website presents two capability lines under PILATUM, COR SEC and T HACK TICAL: the former focuses more on security operations, risk management, and compliance, while the latter leans toward technical consulting, ethical hacking, penetration testing, and red teaming. Rather than offering a single security product, Pilatum positions itself as an expert consulting, assessment, audit, and hands-on exercise provider that helps organizations improve their security capabilities.

Core Capabilities and Protection Types

In terms of protection coverage, Pilatum spans security management, SOC process design, MSSP evaluation, detection use-case development, business continuity, Web/Android/network penetration testing, code review, architecture review, threat hunting, incident response, purple teaming, and training. Its key strength is combining management consulting with offensive security testing: it can help companies design security strategies and compliance controls, while also validating defensive effectiveness through red teaming and penetration testing. The site also explicitly mentions maritime cyber risk assessment for meeting IMO Resolution MSC.428(98), giving it a degree of industry-specific specialization.

Deployment, Management, and Integration

Based on the information on the site, Pilatum appears to be a project-based professional services provider rather than a SaaS platform or standardized software product. For management and alerting, its capabilities focus on SOC detection, triage, response workflows, SOAR/IRP security orchestration, threat hunting, and incident handling capability building. On the integration side, the website mentions evaluating third-party SOC as a Service, EDR, and log management services, and supporting automation related to SOAR/IRP platforms. However, it does not disclose a specific product compatibility list, APIs, or delivery tools.

Pricing and Compliance

Pricing, packages, delivery timelines, and SLAs are not publicly disclosed, so quotes are likely provided based on project scope. On compliance, the services cover ISO 27001, GDPR, PCI-DSS, and IMO MSC.428(98). However, the text does not state which certifications or audit qualifications the company itself holds, so these references should not be interpreted as proof that Pilatum has obtained those certifications.

Pros, Cons, and Best Fit

The advantages are a comprehensive service chain, an emphasis on vendor-neutral advice, coverage of both governance and offensive/defensive validation, and a publicly available PGP key for secure communication. The drawbacks are limited commercial information, with no clear details on team size, customer cases, pricing, or Chinese-language support. It is best suited for medium to large organizations that already have some IT and security foundation and want to build or optimize a SOC, conduct independent penetration testing, select an MSSP, carry out compliance remediation, or perform maritime cyber risk assessments.

Access from China, Payment, and Alternatives

Access from China cannot be determined from the page content alone, and payment methods are not disclosed. If procuring from China, buyers should pay close attention to remote delivery methods, time zones, contracts, payment routes, and cross-border data requirements. Domestic alternatives in China may include DBAPPSecurity, NSFOCUS, Venustech, and Qi An Xin, which provide penetration testing, incident response, SOC, and compliance consulting services.