Cresco Cybersecurity

Cresco Cybersecurity is a cybersecurity company based in Brussels, Belgium working in penetration testing, offensive security, incident response +8 more.

Cresco Cybersecurity is a Belgian cybersecurity company operating from Brussels, Zaventem and Paris. It describes itself as a pure player in cybersecurity, specialising in penetration testing and governance, risk and compliance (GRC). Its services include penetration testing (external, internal, application, cloud and physical), red teaming, social engineering assessments, incident response, cybersecurity assessments and macro audits, business continuity audits, hardening of networks, servers, operating systems, firewalls, email and DNS, backup strategy, vulnerability management, and SIEM and EDR implementation. It also offers managed endpoint detection and response, security awareness and phishing simulation training, and ethical hacking training for IT teams. Cresco supports organisations in aligning with frameworks such as NIS2, ISO/IEC 27001, the NIST Cybersecurity Framework, CIS Controls and CCB Fundamentals, and works with businesses of all sizes. The company states it is an approved partner for Flemish and Walloon government subsidy programmes that help SMEs fund cybersecurity projects. Its penetration testing follows OWASP and OSSTMM methodologies, and it reports delivering around 150 projects and 10,000 hours of penetration testing per year.