A security partner for smaller teams

Affordable, usable, and actually staffed

Consulting, penetration testing and scanning, 恩新·智眸 coverage, and awareness drills — from one partner. Work you can contract, accept, and retest.

Gray-box Usual pentest starting point
恩新·智眸 Monitoring with an analyst on it
CN + EN Included in the standard report
Endpoint telemetry · detection · analyst review · alerts and a monthly report
SME Government Finance Healthcare

Challenges

Sound familiar?

Unsure before go-live

A system is about to launch or change, and you want to know what testing is enough — without buying a full red-team package first.

Short-staffed security

You're running a lean IT team — hiring a full SOC is impossible, but threats don't wait.

Alert fatigue

Too many tools, too many false positives, no time to investigate — alert overload is the norm.

Budget constraints

Enterprise-grade security shouldn't require enterprise-grade spending. You need outcomes, not overhead.

Let's solve these together

Product · 恩新·智眸

恩新·智眸

恩新·智眸 is managed detection and response. EnSynSight is only the English secondary name. Endpoint agents plus remote analyst coverage: monitoring, alert handling, and a monthly report. Cloud-managed when you need someone on alerts quickly; an edge appliance when raw logs must stay on your network.

You do not need to build a security operations center first. Coverage hours and response times go in the quote. Tools that are still being planned are not offered as a subscription on this site.
Affordable · Per-endpoint subscription Usable · Simple customer portal Managed · Remote analyst coverage

Request a Product Demo

Deployment

Three Deployment Options

Three deployments: cloud-managed, edge, and dedicated. Dedicated cloud needs a solution review. Tiers and prices are quoted; this site does not publish a price list.

Logs stay inside

智眸 · Edge

An edge appliance on your side. Raw logs do not leave the network.

  • Edge appliance; raw logs stay on your network
  • Analysts cover the alerts
  • For government and enterprise teams that cannot send raw logs out
  • Coverage level is quoted, not listed as a public price

Needs a review

智眸 · Dedicated

A separate cluster and tenant isolation. Rules and coverage are agreed after a solution review.

  • A separate cluster and tenant isolation
  • Rules and coverage can be written into the contract
  • Quoted only after a solution review
  • For projects that need stronger isolation

How we deliver

How we work

Authorize first Work starts after the written scope and the forbidden items are confirmed. Denial-of-service and load tests against production are off by default.
Reports you can act on Findings are numbered, with remediation notes and the agreed retest. Chinese and English are included, not an add-on.
The contract names the delivery The quote names deliverables, schedule, and whether a retest is included. This site does not publish prices.

Services

Core Services

Sellable work, in outbound priority order. Every price is a quote. Reports are Simplified Chinese and English by default, included in the standard delivery.

Penetration testing

Web, internal network, API, and mobile. Gray-box is the usual default: authorized accounts or design notes, which is more useful than a pure black box. You get a penetration-test report and the agreed retest. Reports are Simplified Chinese and English by default, included in the standard delivery.

恩新·智眸

The trademark is 恩新·智眸. EnSynSight is only the English secondary name. Cloud-managed coverage for teams that need someone on alerts quickly; an edge appliance when raw logs must stay on the network; dedicated cloud after a solution review. Monitoring, analyst coverage, and a monthly report. Ask for a quote.

Annual security checkup

A quote-only package: an agreed number of vulnerability scans and baseline checks, gray-box testing of key systems, and a year-end overview. For teams that want the year covered without a large program. No public package price — ask for a quote.

Security operations consulting

See the gaps in people, process, and tools, and leave with an operating roadmap. Policy writing and day-rate advisory are available too. This is an operations assessment, not a graded-protection classification, and it does not replace a statutory certification.

Awareness training and phishing drills

Practical training, with an exam record if you need one. Phishing drills run only inside a written authorization, and the result is for improvement rather than public shaming. One exercise, or a year of test, train, and test again. Ask for a quote.

Vulnerability scanning and baselines

External exposure and authorized internal scans, plus configuration checks for systems, databases, and network devices. We do not lock the work to a scanner brand; the tool is agreed in the contract. Baselines follow your standard or the contract. If none is named, we only flag gaps against the graded-protection baseline as hints, not as a certification. Reports are bilingual by default.

Risk assessment

An asset, threat, and weakness review that ends in a risk list and a priority order. Focused studies such as data security or supply chain are available. Reports are bilingual by default. Ask for a quote.

Name the scope, then ask for a quote

Email us or leave a note with the rough size of the systems, what you want tested or watched, and the window you have in mind. We reply with a scope suggestion and a quote path. No long contract is required to start the conversation.

Talk to Us