# Candela

> Expert penetration testing to help companies find security vulnerabilities before hackers do.

Candela is a cybersecurity consultancy specializing in manual penetration testing, compliance-ready security assessments, and red team engagements. We help companies across all industries identify and fix security vulnerabilities before attackers exploit them.

## Legal Entity

Grauberg Digital OÜ, registry code 16797609
Sepapaja 6, 15551 Tallinn, Estonia

## Services

- **Penetration Testing**: Manual testing of web applications, APIs, cloud infrastructure, and internal networks by OSCP and CREST certified testers.
- **Compliance-Ready Security Testing**: Assessments structured for SOC 2, ISO 27001, PCI DSS, GDPR, and NIS2 with auditor-ready reports.
- **Red Team Assessment**: Full-scope adversary simulations including social engineering and multi-vector attacks.

## Target Audience

Companies preparing for compliance audits (SOC 2, ISO 27001, NIS2), startups securing their products before fundraising, and enterprises seeking ongoing security testing beyond automated scanners.

## Key Pages

- https://candela.to — Homepage with service overview and booking
- https://candela.to/blog — Security insights on pentesting, compliance, and threat landscape
- https://candela.to/privacy — Privacy policy (GDPR-compliant)
- https://candela.to/terms — Terms of service

## Contact

- Email: hello@candela.to
- Free consultation: https://cal.com/nik-zechner/free-consultation