dedalo.com.ar

What It Is

Dedalo is a cybersecurity consulting firm based in Argentina, positioning itself as a security advisory team that “thinks like an attacker.” Its website emphasizes that its consultants have decades of experience and have served early-stage startups, Fortune 500 companies, and government organizations. It is best understood as a boutique security consulting provider rather than a standardized SaaS security product.

Core Capabilities and Protection Coverage

Its service scope is fairly comprehensive, covering internal and external penetration testing, web application security reviews, mobile application security, network security assessments, cloud security assessments, secure code review, infrastructure security, and security hardening and compliance. Its penetration testing process includes scoping, reconnaissance, scanning and enumeration, vulnerability assessment, authorized exploitation, post-exploitation analysis, reporting, and retesting, with methodologies referencing OWASP, PTES, and NIST. For web and mobile security, it covers OWASP Top 10, authentication and sessions, access control, business logic, APIs, static/dynamic analysis, reverse engineering, and communication security. For cloud security, it focuses on IAM, networking, firewalls, encryption, logging and monitoring, and compliance mapping across environments such as AWS, Azure, and GCP.

Deployment, Management, and Integration

Dedalo is primarily delivered as consulting projects, so customers do not need to purchase a fixed platform. Deliverables include executive summaries, technical reports, vulnerability severity ratings, remediation prioritization, code-level fix recommendations, compliance mapping, and retest validation. Its integration capability is reflected more in the scope of systems it can assess, such as cloud platforms, APIs, network devices, firewalls, databases, containers, and Kubernetes. However, the website does not state whether it offers a continuous monitoring platform, real-time alerts, ticketing system integration, or SIEM/SOAR integration.

Pricing and Compliance

The website does not publish pricing and only provides a Free Consultation entry point. Quotes are likely based on project scope, number of assets, testing depth, and deliverables. On compliance, it mentions GDPR, HIPAA, and PCI DSS, and offers compliance gap analysis and security baseline hardening. However, it does not disclose whether the company itself holds certifications such as ISO, SOC 2, or CREST.

Pros, Cons, and Best Fit

Its strengths are broad service coverage, a clearly described process, and a combination of automated scanning and manual testing. It is suitable for pre-launch security assessments, periodic penetration testing, cloud configuration audits, compliance remediation, and security reviews of critical infrastructure. Limitations include the lack of disclosed pricing, project timelines, consultant certifications, SLA terms, customer case studies, and payment methods. It is not ideal for teams that want to immediately purchase a standardized security platform or require clearly defined 24/7 managed alerting services.

Access from China and Alternatives

Access from mainland China cannot be determined from the main site content, and payment methods and Chinese-language support are not specified. For local delivery, classified protection compliance, or Chinese-language reports, domestic vendors such as QiAnXin, NSFOCUS, DBAPPSecurity, Venustech, and Sangfor may be worth considering. For international penetration testing consulting, alternatives include NCC Group, Bishop Fox, Cobalt, and Synack.