Services
Sellable work, in this order. Prices are quotes; this site does not publish renminbi figures. Reports are Simplified Chinese and English by default, included in the standard delivery.
Web, internal network, API, and mobile. Gray-box is the usual default: authorized accounts or design notes, which is more useful than a pure black box. You get a penetration-test report and the agreed retest. Reports are Simplified Chinese and English by default, included in the standard delivery.
The trademark is 恩新·智眸. EnSynSight is only the English secondary name. Cloud-managed coverage for teams that need someone on alerts quickly; an edge appliance when raw logs must stay on the network; dedicated cloud after a solution review. Monitoring, analyst coverage, and a monthly report. Ask for a quote.
A quote-only package: an agreed number of vulnerability scans and baseline checks, gray-box testing of key systems, and a year-end overview. For teams that want the year covered without a large program. No public package price — ask for a quote.
See the gaps in people, process, and tools, and leave with an operating roadmap. Policy writing and day-rate advisory are available too. This is an operations assessment, not a graded-protection classification, and it does not replace a statutory certification.
Practical training, with an exam record if you need one. Phishing drills run only inside a written authorization, and the result is for improvement rather than public shaming. One exercise, or a year of test, train, and test again. Ask for a quote.
External exposure and authorized internal scans, plus configuration checks for systems, databases, and network devices. We do not lock the work to a scanner brand; the tool is agreed in the contract. Baselines follow your standard or the contract. If none is named, we only flag gaps against the graded-protection baseline as hints, not as a certification. Reports are bilingual by default.
An asset, threat, and weakness review that ends in a risk list and a priority order. Focused studies such as data security or supply chain are available. Reports are bilingual by default. Ask for a quote.
Packages such as the annual checkup, or operations consulting plus 恩新·智眸, are quoted. There is no public price.
Red team is a pilot and is not on the main wall. We consider it only after monitoring is already in place and a written authorization has been reviewed. Phishing drills belong with awareness training, not with red team.