dongit.eu

What It Is

DongIT is a Web security and Web development company based in the Netherlands. Its core expertise comes from more than ten years of professional penetration testing, ethical hacking, and software development experience. Its services include penetration testing for Web/mobile applications, external and internal networks, security-oriented Web portal development, and an all-in-one penetration testing reporting platform called Security Reporter / Reporter.

Core Capabilities and Deployment

In terms of protection model, DongIT is closer to “professional security services + secure delivery tooling” than a traditional perimeter-protection or cloud-security product. Penetration tests are carried out by certified testers, with an emphasis on using mature attack methodologies to identify vulnerabilities and risks. The reporting platform provides collaboration tools, retesting/review workflows, templates, and a customer portal, making it suitable for improving penetration test report production and client delivery efficiency. The official website does not state whether the platform is SaaS, privately deployed, or on-premises, nor does it disclose API, SSO, SIEM, or ticketing-system integration capabilities.

Compliance, Management, and Service

DongIT has obtained ISO 27001:2022 certification. The site states that its information security management system covers policies, governance, risk management, technical and organizational measures, incident response, monitoring, logging, and employee awareness, among other areas. It also mentions the CCV Pentesting Quality Mark. The team manually matches suitable experts to each project and emphasizes transparent delivery and long-term customer relationships. From a management perspective, the reporting platform covers collaboration and workflow, but there is no clear information on alerting, continuous monitoring, or managed security operations capabilities.

Pricing, Pros, and Cons

The official website does not disclose pricing, packages, or payment methods for penetration testing, secure development, or the reporting platform, so value for money can only be assessed conservatively. Its strengths are the tight combination of security and development capabilities, making it a good fit for complex Web systems, sensitive-data portals, and security teams that need high-quality reporting workflows. The drawbacks are limited information on pricing, deployment, data residency, integrations, and local support in China; these should be confirmed through commercial discussions before procurement.

Best Fit and Access from China

DongIT is suitable for medium to large organizations, security consulting teams, and development teams that need professional Web/mobile/network penetration testing, want to standardize penetration test reporting workflows, or are building secure Web portals. There is no information in the source material about access from mainland China, so it should be considered unknown; payment methods are also not disclosed. If local compliance, Chinese-language service, and domestic network accessibility are required, domestic alternatives such as DBAPPSecurity, NSFOCUS, Qi An Xin, and Venustech may be worth evaluating.