threatspotting.com

What It Is

Threatspotting Ltd is an independent cybersecurity consulting and education firm based in Budapest, Hungary, founded by Craig Balding. The website highlights his experience leading the GE Red Team and serving as Group Security CTO at Barclays PLC. Its current services cover enterprise security consulting, ISO 27001 preparation for startups, security education, and AI/cybersecurity content. Rather than a traditional security software product, it is a professional services provider centered on expert consulting, training, and knowledge resources.

Core Capabilities and Protection Types

Based on the available text, its core areas include independent security assessment, AI and cloud security consulting, white-label consulting, ISO 27001 readiness, risk communication, and support for responding to security questionnaires. CTOsec.com targets startups and internal auditors, helping them prepare for ISO 27001 and handle customer security questionnaires. Cyberbuilder.io provides hands-on education for security practitioners and students. CloudSecurity.org is a directory of cloud security tools mapped to ISO 27002 controls. Overall, its capabilities lean toward governance, assessment, compliance preparation, and security engineering enablement, rather than continuous protection products such as EDR, WAF, or SOC services.

Deployment, Management, and Integration

Workshops are delivered onsite at the client’s location, with the client expected to provide a room, Wi‑Fi, projector, desks, chairs, and power. The training content includes Aider, LLMs, Python FastAPI, HTTP response headers, port-scanning data, API key authentication, Pydantic validation, pytest testing, Semgrep, Docker, and CI/CD, indicating a strong practical engineering focus in its education scenarios. However, the website does not disclose any centralized management console, alerting platform, ticketing workflow, or 24/7 managed response service. Mentions of RBAC and alerting only appear in discussions of potential future enterprise features during workshops and should not be treated as delivered capabilities.

Pricing and Compliance

The disclosed price is €5,000 per half-day onsite workshop, payable after booking confirmation, plus reasonable travel and necessary accommodation expenses. Pricing for enterprise consulting, ISO 27001 coaching, white-label advisory, and other services is not publicly listed. On compliance, Threatspotting explicitly offers ISO 27001 readiness services and references ISO 27002 controls via CloudSecurity.org, but it does not disclose whether the company itself holds certifications such as ISO or SOC 2.

Pros, Cons, and Best Fit

Its strengths are a strong founder background, independent positioning, and pragmatic communication. It is suitable for companies and startup teams that need to improve security credibility, prepare for ISO 27001, respond to customer security questionnaires, obtain AI/cloud security consulting, or receive hands-on security training. The drawbacks are limited disclosure around service details, case studies, SLAs, consulting fees, and payment methods. Customers needing productized protection, continuous monitoring, onsite operations, or local compliance delivery should confirm requirements in detail before engaging.

China Access and Alternatives

The website’s accessibility from mainland China cannot be determined from the source text, and payment methods are not disclosed. Given that it is a Hungarian consulting firm, Chinese customers should also evaluate language, time zone, travel, cross-border payment, and onsite training costs. For localized security consulting and compliance implementation, alternatives include Qi An Xin, NSFOCUS, DBAPPSecurity, and Venustech. For higher-end international security consulting, NCC Group, Mandiant, and Bishop Fox may be worth comparing.