productsecurity.nl

What It Is

Jac Product Security is a small information systems security and privacy consulting firm based in the Netherlands. It positions itself as a provider of “security and privacy advice and consultancy,” while also touching on human-centered software development. It is not a traditional security product platform; rather, it offers the expertise and personal involvement of the company owner on a contract basis, focusing on security and privacy issues throughout IT product and software application development.

Core Capabilities and Protection Scope

Based on the site content, its services cover a fairly broad range of areas, including security risk assessment, secure development lifecycle support, security product specification, security architecture, security design and implementation, security testing, and the creation of security processes and policies. This suggests a focus on product security consulting and SDL development, making it suitable for identifying bottlenecks early in the requirements, design, development, and testing phases, before security and privacy issues become blockers later in a project. The text also emphasizes making security and privacy serve businesses and customers in a cost-effective way, reflecting a strong engineering and practical-delivery orientation.

Deployment, Management, and Integration

The service does not appear to be a SaaS platform, on-premises software, or a managed security appliance. Its deployment model should therefore be understood as contract-based consulting. The site does not mention a management console, alerts, continuous monitoring, reporting, CI/CD integration, or integration with third-party security tools. As a result, companies that need automated vulnerability management, SIEM alerts, or DevSecOps platform capabilities will need to evaluate additional tools or combine this service with other solutions.

Pricing and Compliance

For pricing, the website only states that the owner provides services on a contract basis. It does not publish quotes, packages, payment methods, or service-level agreements. Compliance certifications, industry qualifications, and customer references are also not disclosed. Before procurement, buyers should specifically ask about the scope of deliverables, billing model, confidentiality agreements, report formats, consultant qualifications, and whether relevant compliance frameworks are supported.

Pros, Cons, and Who It’s For

The main advantages are its coverage of the product security lifecycle, emphasis on early involvement, and direct participation by the consultant. It is suitable for small and medium-sized teams, software development teams, and early-stage product projects that lack in-house security architecture or SDL experience. The downside is that publicly available information is very limited, and its scalability, certification backing, response mechanism, and toolchain integration capabilities are unclear. Enterprises that require large on-site teams, 7×24 support, or formal compliance audit evidence should evaluate it carefully.

Access from China and Alternatives

The site does not provide information about access from China, nor does it specify payment methods. Since the company is based in the Netherlands and appears to focus on offline or remote consulting, Chinese customers should confirm network communication, time zone coordination, contracting, payment, and language support. Alternatives may include local Chinese security service providers with experience in SDL, MLPS, privacy compliance, penetration testing, and security architecture consulting.