Security audit

Infrastructure and code review, controlled penetration testing, and a prioritised report with the work needed to close each finding.