Skip to content
AFRISCON
Incident in progress?
FR FrançaisEN English
Let’s discuss your project

Cybersecurity · Technology · IT consultant portage

Cybersecurity & technology. IT talent & consultant portage.

Incident response, DFIR, penetration testing, security audits, technology projects and IT consultant portage: we bring in the right expertise for each of your needs.

Let’s discuss your projectGet incident support

For businesses, organizations and IT consultants.

Facing an incident?Emergency line 24/7: +212 669 605 492Report an incident
The right expertise for every needCybersecurityTechnology & IT infrastructureAdvisory & expertiseIT talent & consultant portage

A team certified by

  • PECB
  • OffSec
  • GIAC
  • EC-Council
  • CompTIA
  • PortSwigger
  • TCM Security
  • INE
  • Altered Security
  • Zero-Point Security
  • Fortinet
  • Cisco
  • Check Point

Our expertise

The right expertise, at the right moment.

A practical approach to understanding exposure, strengthening defenses and responding to incidents.

Incident response & DFIR

Digital forensics, evidence preservation and remediation support when facing a compromise.

Explore this expertise

Penetration testing & security audits

Penetration testing, security audits and SOC assessments to evaluate exposure and prioritize action.

Explore this expertise

Network & cybersecurity solutions

Supply and integration of firewalls, WAF, network security and SD-WAN, from technical scoping to commissioning.

Explore this expertise

Advisory, governance & compliance

Cybersecurity strategy, ISO 27001, risk management and virtual CISO support to structure your security program.

Explore this expertise

SOC packages

Three ways to strengthen your SOC.

From an assessment to a full operating model, we help your team build and improve its own SOC.

Essential

An assessment of your current SOC or monitoring, to learn what you actually see and what to fix first.

  • Detection coverage audit
  • Log source review
  • Escalation process review
  • Prioritized action plan
Request the Essential package

Advanced

We help your team extend detection and respond better, with progress tracked over time.

  • Use-case design and tuning
  • Response playbooks
  • Threat-hunting exercises with your analysts
  • Quarterly maturity reviews
Request the Advanced package

Enterprise

Designing the SOC operating model for complex environments and regulated organizations.

  • SOC governance and organization
  • Architecture and integrations
  • KPIs and executive reporting
  • Roadmap to extended coverage
Request the Enterprise package

Our approach

From findings to practical action.

A clear scope, actionable deliverables and priorities tailored to your environment.

Discover our approach

Example: from pentest to remediation

Pentest: a path from the Internet → exposed VPN → workstation → Active Directory → critical data is identified.

Remediation: VPN patched and placed behind a firewall (Fortinet, Cisco, Check Point), workstation patched, Active Directory hardened, data isolated by segmentation. The path is closed.

  1. 01

    Scope

    Understand your priorities, assets and constraints.

  2. 02

    Assess

    Analyze exposure and identify priorities.

  3. 03

    Act

    Test, integrate, investigate or remediate as required.

  4. 04

    Hand over

    Document results and plan the next actions.

Why AFRISCON

Trust is built on method.

Security demands discretion, rigor and verifiable results. Here is how we work.

Confidentiality & NDA

A non-disclosure agreement is signed before every engagement starts. Your information, your findings and our clients’ identities stay confidential.

24/7 incident response

If an incident hits, our emergency line is reachable around the clock, weekends included, to assess the situation and start the response.

+212 669 605 492

Certified team

Consultants certified in governance, offensive and defensive security and forensics: ISO/IEC 27001 Lead Auditor, OSCP, GCIH, CHFI…

Recognized frameworks

ISO/IEC 27001 and 27005, EBIOS Risk Manager, CVSS scoring: recognized methods for comparable, defensible results.

Actionable deliverables

Documented findings, clear priorities and recommendations your teams can act on.

Certifications

A team certified in industry standards.

Our consultants hold recognized certifications in governance, offensive security, defensive security, digital forensics and network security solutions.

Logos belong to their respective organizations and identify the body that issues each certification.

Governance, risk & compliance

  • PECB Certified ISO/IEC 27001 Lead ImplementerImplementing an information security management system (ISMS).PECB Certified ISO/IEC 27001 Lead AuditorAuditing an ISMS against ISO 19011 and ISO/IEC 17021.PECB Certified ISO/IEC 42001 Lead ImplementerImplementing an artificial intelligence management system.PECB Certified ISO/IEC 27005 Risk ManagerInformation security risk management.

  • EBIOS

    EBIOS Risk ManagerScenario-based risk analysis method published by ANSSI.

Offensive security

  • OffSec Experienced Penetration TesterAdvanced penetration testing and evasion of defenses.OffSec Certified ProfessionalHands-on penetration testing, proven in a practical exam.OffSec Wireless ProfessionalWireless network penetration testing.

  • GIAC Red Team ProfessionalRed team operations and adversary emulation.

  • Altered Security

    Certified Red Team ProfessionalAttacks on Active Directory environments.

  • Zero-Point Security

    Certified Red Team OperatorRed team operations with a command-and-control framework.

  • Certified Ethical HackerEthical hacking techniques and tools.

  • Practical Network Penetration TesterEnd-to-end network penetration test, including report and debrief.

  • eLearnSecurity Junior Penetration TesterHands-on penetration testing fundamentals.

  • Burp Suite Certified PractitionerWeb application security testing with Burp Suite.

Defensive security & forensics

  • GIAC Certified Incident HandlerDetecting and handling security incidents.GIAC Certified Forensic AnalystAdvanced digital forensics and incident response.

  • CompTIA Cybersecurity AnalystThreat analysis, detection and response.

  • Certified SOC AnalystSecurity operations center (SOC) operations.Computer Hacking Forensic InvestigatorDigital forensics and evidence preservation.

Network & security solutions

  • Fortinet Certified Professional – Network SecurityDeploying and managing Fortinet network security solutions.Fortinet Certified Solution Specialist – Network SecurityDesigning and operating Fortinet network security architectures.Fortinet Certified ExpertFortinet’s highest certification level.

  • Cisco Certified Network AssociateNetworking and network security fundamentals.Cisco Certified Network Professional SecurityImplementing Cisco security solutions.

  • Check Point Certified Security AdministratorAdministering Check Point security gateways and policies.Check Point Certified Security ExpertAdvanced configuration and optimization of Check Point solutions.Check Point Certified Troubleshooting AdministratorTroubleshooting Check Point solutions.Check Point Certified Troubleshooting ExpertAdvanced troubleshooting of Check Point environments.

Consultants & portage

Human expertise at the heart of your projects.

Consultant portage, technology expertise and IT skills: we connect business needs with specialists in cybersecurity, infrastructure and GRC.

Find your path

Two needs, one contact

I’m a consultant

Share my expertise and availability.

I represent a business

Share a need for specialist skills.

Cyber watch

Stay informed. Be better prepared.

Open the observatory

CVEs published in 7 days

3,159

-37% vs previous 7 days

Critical severity

232

CVSS score 9.0 to 10

Exploited vulnerabilities added (30 days)

32

CISA KEV catalog

Loading bulletins…

All DGSSI bulletins
View all bulletins

FAQ

Your questions, answered.

Another question? Write or call us and we will direct you to the right person.

How does an engagement work?

We scope your priorities, assets and constraints, assess your exposure, then act (test, integrate, investigate or remediate) and hand over documented results with the next steps. Our approach

We are facing an incident right now. What should we do?

Call our 24/7 emergency line (+212 669 605 492) or report the incident online. Meanwhile, preserve logs and evidence, isolate suspicious machines from the network without powering them off abruptly, and avoid deleting or reinstalling anything. Report an incident

How is the information we share protected?

A non-disclosure agreement is signed before every engagement starts. Engagements and references stay confidential, and sensitive information is exchanged through controlled channels. Never send passwords or malicious files through the website forms. Privacy policy

Do you work outside Morocco?

Yes. AFRISCON supports businesses and organizations in Morocco and across Africa; how we work with you is defined during scoping.

Can you also supply security equipment and licenses?

Yes. AFRISCON supplies and integrates security solutions (firewalls, WAF, network security, SD-WAN), from technical scoping to commissioning. Network & cybersecurity solutions

Can you assess our ISO 27001 maturity?

Start with our free 12-question self-assessment for a first score, then an evidence-based gap assessment turns it into a prioritized roadmap. Take the self-assessment

What is IT consultant portage?

Portage lets independent IT, cybersecurity or GRC consultants work on assignments under AFRISCON’s umbrella, while companies get access to the specialist skills they need. Consultants & portage

Let’s take action

Your security starts with a conversation.

Let’s discuss your project