Hi, I'm Albert Neumann
Independent cybersecurity professional
I run Aegis, a service by Clarvix that finds what's exposed about your business online. Every report that goes out passes through me personally before it reaches you — it isn't automated output with a logo on it.
Why I built Aegis
Small businesses in Israel fall between two options. On one side, security firms priced for enterprise budgets, with long sales cycles and reports written for an IT department you don't have. On the other, anonymous automated scanners for a few dollars that return a list of technical warnings with no context, no prioritisation, and nobody who checked whether any of it actually matters to you. There is almost nothing in the middle, and that gap is exactly where Aegis operates.
How I work
The assessment is grounded in recognised industry methodologies — OWASP WSTG and PTES — and combines automated tooling with human review. The tools surface candidates; I decide what is a real risk, what is a false positive, and what order things should be fixed in for your specific business. That distinction is the whole service: you get decisions, not a raw scanner export.
What I don't do
The assessment is entirely passive and conservative. I don't attempt to exploit vulnerabilities, I don't send phishing, and I don't perform any action that could disrupt a live service. I'm also not a certification body: I don't issue compliance certificates, and nobody — myself included — can guarantee absolute security. If something falls outside my scope, I say so instead of inventing an answer.
Who this is for
Small and mid-size businesses in Israel with no internal security lead, and solo founders who shipped a product using AI-assisted development tools like Lovable, Base44 or Replit. Both groups have the same problem: a system running in production that nobody has ever looked at from the outside.
Want to talk?
A short intro call, no cost and no commitment. I'll tell you straight whether the assessment is relevant for you or not.
Chat on WhatsApp