DongIT Information

DongIT is an independent Dutch cybersecurity company, founded in 2012 and based in Leiden. We specialize in senior-led penetration testing and security assessments for web applications, APIs, cloud environments, networks, mobile apps and OT systems. Our pentests are performed exclusively by certified specialists (OffSec) working under a four-eyes principle, with methodologies aligned with OWASP, NCSC guidelines and emerging Dutch government standards. DongIT holds the CCV Keurmerk Pentesten and is ISO/IEC 27001:2022 certified, and we are a member of ECSO and Security Delta (HSD). More than 500 organizations rely on our work, from SMEs to banks, government bodies and international technology companies. What sets DongIT apart is the combination of offensive security expertise and deep software engineering knowledge. We understand how software is built, not just how it breaks. That makes our findings concrete, reproducible and directly actionable for the teams that need to fix them. That engineering DNA also produced Security Reporter: our self-hosted, all-in-one pentest assessment and reporting platform, in development since 2020 and used by security teams across Europe. It supports the full assessment workflow, from testing and collaboration to retesting and branded PDF and CSV exports. Learn more: • dongit.eu — company • websecurityscan.eu — pentesting services • securityreporter.app — Security Reporter platform