# Apesec GmbH

> Swiss boutique cybersecurity firm specializing in penetration testing, red teaming, and cloud security audits. Primarily serves Swiss SMEs (KMU) with 20–500 employees. Based in Teufenthal, Canton Aargau, Switzerland.

Apesec GmbH is an offensive security company founded by Manuel Füllemann and Kevin Illi, both senior penetration testers holding OSCP, OSEP, and CPTS certifications. The company provides hands-on security testing — penetration tests (Penetrationstest), red teaming, cloud security audits, and phishing simulations — primarily for Swiss organizations, with services also available to international clients. All testing is performed in-house by senior specialists (no outsourcing or subcontracting). Languages: German and English.

- Website: https://apesec.ch
- Location: Teufenthal, Canton Aargau, Switzerland
- UID (Unternehmens-Identifikationsnummer): CHE-196.727.747
- Certifications: OSCP, OSEP, OSWA, CPTS, CWES, CySA+, Pentest+
- Memberships: Swiss Made Software, ITSec4KMU
- Contact: info@apesec.ch / +41 56 520 60 67

## Services

- [External Penetration Test](https://apesec.ch/pentest-external.html): Network perimeter and internet-facing infrastructure testing (from CHF 4,500)
- [Internal Penetration Test](https://apesec.ch/pentest-internal.html): Internal network, Active Directory, and lateral movement testing (from CHF 7,500)
- [Web & API Penetration Test](https://apesec.ch/pentest-web-api.html): Web application and REST/GraphQL API security testing (from CHF 4,500)
- [OSINT & Phishing Simulation](https://apesec.ch/osint-phishing.html): Open-source intelligence gathering and social engineering campaigns (from CHF 4,500)
- [Cloud Security Audit](https://apesec.ch/cloud-security.html): Security review of AWS, Azure, or GCP environments (from CHF 4,500)
- [Red Teaming & Attack Simulation](https://apesec.ch/red-teaming.html): Full-scope adversary simulation targeting people, processes, and technology (from CHF 15,000)
- [Threat Simulation](https://apesec.ch/threat-simulation.html): Adversary emulation based on MITRE ATT&CK framework
- [Tabletop Exercises](https://apesec.ch/tabletop-exercises.html): Crisis preparedness and incident response exercises for management teams

## SME Packages (KMU-Pakete)

- [KMU Cybersecurity Packages](https://apesec.ch/kmu.html): Fixed-scope security packages designed for Swiss small and medium enterprises
- Basis Package (from CHF 3,500): External pentest + email security check + darknet exposure check
- Kompakt Package (from CHF 6,900): Basis + web app pentest + M365/Entra ID check + nDSG compliance statement (Datenschutzkonformität)

## Compliance

Apesec helps organizations meet requirements under Swiss and international frameworks:

- nDSG / revDSG (neues Datenschutzgesetz — Swiss Federal Act on Data Protection, revised 2023)
- FINMA regulations (Swiss Financial Market Supervisory Authority)
- ISG (Informationssicherheitsgesetz — Swiss Information Security Act)
- ISO 27001 audit preparation and gap analysis

## Deliverables

All engagements include:

- Hand-written report with management summary (traffic-light risk format for non-technical stakeholders)
- Technical findings with CVSS-based risk ratings
- Prioritized remediation recommendations (Massnahmenplan)
- Personal debrief meeting with technical and management teams

## Company

- [About Apesec](https://apesec.ch/about.html): Team background, certifications, and company history
- [Contact & Booking](https://apesec.ch/contact.html): Free initial consultation (Erstgespräch) via booking calendar
- [Sample Report](https://apesec.ch/sample-report.html): Example penetration test report structure
- [Blog](https://apesec.ch/blog.html): Technical articles on cybersecurity topics
- [Privacy Policy](https://apesec.ch/privacy.html): Data processing and privacy information

## Optional

- [All Services Overview](https://apesec.ch/services.html): Complete service catalogue with pricing
- Target market: Swiss SMEs (KMU / kleine und mittlere Unternehmen) across industries including finance, healthcare, manufacturing, legal, and technology
- Common search terms (DE): Penetrationstest Schweiz, IT-Sicherheitsaudit, Sicherheitsüberprüfung, Ethical Hacking Schweiz, Cybersicherheit KMU, Red Team Schweiz, Cloud Sicherheit
- Common search terms (EN): penetration testing Switzerland, Swiss pentest provider, cybersecurity audit Switzerland, red team Switzerland, OSCP certified pentesters, offensive security Switzerland