What we kept seeing
External SOC, in-house build, or interim? Often nobody knows the smartest next step.
How we work
First, clarity on where you stand and which routes are realistic.
OUR STORY
Why Noctulux exists.
Security is not the mystery. The starting point usually is.
Web
Applications
Security
Operations
Training
Mentoring
Interim
Freelance
noctulux-capabilities.log
Why Noctulux exists
External SOC, build in-house, interim help, or invest in people and tooling? Many teams are unsure what makes sense right now. We help you see where you stand and which route fits.
What we kept seeing
Big spends on contracts or tooling before the organisation knows what it actually needs.
How we work
Then choose what fits: external, in-house, interim, or a mix. No pressure to do everything at once.
What we kept seeing
Plenty of advice and options. Hard to pick one concrete next step.
How we work
Fixed scope and clear deliverables. You know what you get before work starts.
What we kept seeing
- External SOC, in-house build, or interim? Often nobody knows the smartest next step.
- Big spends on contracts or tooling before the organisation knows what it actually needs.
- Plenty of advice and options. Hard to pick one concrete next step.
How we work
- First, clarity on where you stand and which routes are realistic.
- Then choose what fits: external, in-house, interim, or a mix. No pressure to do everything at once.
- Fixed scope and clear deliverables. You know what you get before work starts.
Noctulux delivers scoped cybersecurity services, built by a SOC architect who sat on both sides of the table. Web app security, external rating, SOC/SIEM, detection engineering, threat hunting, reporting, remediation validation. Fixed scope and fixed deliverables per engagement, with output engineers and leadership can use.
noctulux-core · expertise map
Noctulux expertise
Architectuur
Blueprint & roadmap
SIEM
Logs & correlatie
Detectie
Rules & MITRE
NX
SOC
Triage & response
Hunting
Hypotheses & queries
VM
Risico & patching
6 domeinen actiefenterprise · gereguleerd
EXPERTISE
Four core areas
Web applications, security operations, training, and interim support. Four areas with scoped services and clear deliverables.
Security operations
SOC and SIEM, detection, threat hunting, vulnerability management, and security architecture. From baseline and blueprint to rules and process improvement.
View these services →
- SOC/SIEM Assessment
Assessment of SIEM/SOC maturity, use cases, alerts, triage, and processes.
- SOC/SIEM Blueprint & Baseline
Architecture, baseline, use cases, dashboards, and handover.
- Detection Engineering & Threat Hunting
Detection rules and proactive threat hunting for your SIEM.
- SOC Workflow & Reporting
Workflows, runbooks, KPIs, and management reporting.
- Vulnerability Management
Risk-based prioritisation of vulnerabilities across assets.
Web applications
Pentest, external rating, and periodic reporting. Concrete findings and retest after you ship fixes.
View these services →
- External Web Application Rating Report
External risk-rating assessment of your web application with clear grades and priorities.
- Web Application Penetration Testing
Authorised hands-on testing of frontend, backend, APIs, and business logic.
- Periodic Security Reporting
Recurring external assessment with trends and remediation progress.
- Remediation Validation
Focused retest of previously reported findings after fixes.
Training & mentoring
Guide juniors and starters in cybersecurity. Lessons, coaching, and mentoring aligned with your environment.
View these services →
- Cybersecurity Training & Mentoring
Lessons and mentoring for SOC, SIEM, InfoSec/GRC, and career paths
Interim & freelance
Temporary architect, engineer, analyst, or GRC specialist. Scoped assignments, no long-term contract.
View these services →
- Interim & ZZP Security Roles
Architect, detection engineer, analyst, VM, GRC, or guidance
OUR SPECIALISTS
Certifications and tooling from practice
We specialise in security operations, SIEM platforms, information security, and web application security. Our specialists hold enterprise certifications and work daily in regulated environments.
39
Certifications
45+
Security tools
9
Frameworks
Tier 1–3
SOC experience
noctulux-certs · registry
alleen certificeringen
Microsoft
6 certificeringen
- SC-200 Security Operations Analyst
- SC-100 Cybersecurity Architect
- SC-300 Identity & Access Administrator
- SC-400 Information Protection Administrator
- AZ-500 Azure Security Engineer
- SC-900 Security Fundamentals
Splunk
7 certificeringen
- Splunk Core Certified User
- Splunk Certified Power User
- Splunk Enterprise Certified Admin
- Splunk Enterprise Security Certified Admin
- Splunk Certified Cybersecurity Defense Analyst
- Splunk Certified Knowledge Manager
- Splunk Certified Data Administrator
Elastic
8 certificeringen
- Elastic Certified Engineer
- Elastic Certified SIEM Analyst
- Elastic Certified Observability Engineer
- Elastic Certified Data Analyst
- Elastic ES|QL
- Elastic Search Relevance Engineer
- Kibana Data Analysis
- Elastic Security for SOC Analysts
CompTIA
4 certificeringen
- CompTIA SecurityX
- CompTIA CySA+
- CompTIA Pentest+
- CompTIA Security+
ISC2
2 certificeringen
- CISSP
- SSCP
ISACA
2 certificeringen
- CISM
- CRISC
GIAC
8 certificeringen
- GCIH
- GCIA
- GSEC
- GNFA
- GCFE
- GPEN
- GWAPT
- GREM
Offensive Security
1 certificering
- OSCP
PortSwigger
1 certificering
- BSCP
platforms & tooling · per categorie
SIEM & logging
ElasticSplunkMicrosoft SentinelWazuhRapid7 InsightIDRIBM QRadarLogRhythmKibanaES|QLSplunk ITSI
Endpoint & XDR
CrowdStrikeMicrosoft DefenderMicrosoft Defender XDRSentinelOneCortex XDRTaniumCanary
Identity & cloud
Microsoft EntraMicrosoft 365AzureAWSGoogle WorkspaceOkta
Vulnerability & risk
TenableNessusRapid7 InsightVMQualysRiskReconKenna
Web & pentest
Burp SuiteOWASP ZAPNucleiSQLMapNiktoMetasploitAcunetix
Email & awareness
MimecastPhishERKnowBe4ProofpointAbnormal Security
IR, intel & network
TheHiveVirusTotalShadowserverCisco UmbrellaMISPOpenCTIZeekTopdesk
Frameworks & compliance
ISO 27001NEN 7510SOC 2NIS2DORAAVGNIST CSFMITRE ATT&CKOWASP Top 10
Explore further
How we work, handle data, and operate
Three pages that explain what makes Noctulux different. Open the topic you want to read.
01·Privacy
Data & privacy
Data handling per assignment. Clear agreements upfront. You own the outputs.
Open page02·Scope-first
How we work
Clear assignments with fixed outputs. Boundaries agreed before work starts.
Open page03·Ops discipline
How we operate securely
Secure by design, transparent by default. Operational discipline for client data and findings.
Open pageLegal terms live under /legal. These pages explain our operating model.