01
24/7 monitoring and response across SIEM, EDR and cloud logsManaged SOC & MDR (24/7)
From our İstanbul SOC we monitor your logs, endpoints and cloud telemetry 24/7, detect threats and respond to them.
View Details24/7 SOC · Penetration Testing · KVKK Compliance
We find the attack before it finds you
From our İstanbul SOC we monitor log, endpoint and cloud telemetry for more than 180 organisations and respond on average within 14 minutes of detection.
01
24/7 visibility with a managed SOCWe unify SIEM, EDR and cloud logs on a single pane and monitor them with our analysts on…
02
Penetration testing: think like a real attackerWeb, mobile, network and cloud tests using OWASP, PTES and MITRE ATT&CK methodologies.
03
KVKK and regulatory complianceVERBİS, data inventory, breach notification and ISO 27001 readiness under one roof.
- 01Organisations monitored
- 180+
- 02Average first response time
- 14 min
- 03Penetration tests delivered
- 2600+
- 04OSCP / CISSP / CEH certified experts
- 38
Defence layers
Detection, testing and compliance services
02
Web, mobile, network, API and cloud penetration testsPenetration Testing
We find vulnerabilities with real attacker techniques, report them with risk prioritisation and retest after remediation.
View Details03
VERBİS, data inventory, policies and breach managementKVKK Compliance Consulting
Together we build Law No. 6698-compliant data inventory, notices, consent, VERBİS registration and breach procedures.
View Details04
Ransomware, data leaks and account takeover casesIncident Response & Digital Forensics
During an attack we deploy 24/7, stop propagation, preserve evidence and run root-cause analysis and the recovery plan.
View Details05
Continuous scanning, risk prioritisation and patch trackingVulnerability Management
We scan your estate continuously, surface actively exploited flaws first and make patching measurable.
View Details06
Targeted attack simulation, phishing and physical accessRed Team & Social Engineering
End-to-end attack-chain simulation from the attacker’s view, plus measurement of staff awareness.
View Details5-minute self-assessment
Cyber Security Maturity Test
Assess your maturity across inventory, identity, backup, monitoring and incident response on a 0–30 scale in 10 questions.
Live threat feed
Security Bulletins / CVE Alerts
The Surnet Threat Intelligence team compiles critical vulnerabilities and active attack campaigns that may affect organisations in Türkiye and publishes them with recommended actions. Filter by severity, system type and patch status.
- 01Authentication bypass in SSL-VPN gatewaysAuthentication can be bypassed on the management interface of corporate SSL-VPN gateways; attackers are actively…
CVE-2026-31842Critical9.8 /1022 October 2026 - 02Remote code execution in on-premises mail serverUnauthenticated remote code execution on on-premises mail servers; reported in targeted attacks.
CVE-2026-29977Critical9.1 /1020 October 2026 - 03File-upload flaw in a popular form pluginA widely used form plugin for an open-source CMS lets attackers bypass extension checks and upload a web shell.
CVE-2026-30415High8.8 /1018 October 2026 - 04Local privilege escalation in the Linux kernelA memory error in a kernel networking subsystem gives a local user root privileges.
CVE-2026-28803High7.8 /1015 October 2026 - 05Unauthenticated access in an industrial HMI web interfaceThe web interface of factory HMI panels does not require authentication by default; no vendor patch yet.
CVE-2026-31120Critical9.4 /1012 October 2026 - 06DLL side-loading in a corporate VPN clientThe VPN client installer loads a DLL from an untrusted directory, enabling local privilege escalation.
CVE-2026-26391Medium6.7 /108 October 2026
About Surnet
A line of defence for banks, healthcare and manufacturing since 2014
Surnet treats cyber security as a measurable risk programme rather than product sales. We map your attack surface, prioritise vulnerabilities, monitor around the clock and stand next to you when an incident happens.
- ISO 27001 and ISO 22301 certified SOC operation
- Vendor-neutral: risk reduction, not product sales
- All data stays in Türkiye, compliant with KVKK and sector regulations
Online subscription
SOC and testing packages
Clearly scoped, transparently priced packages — add to cart and start right away with secure payment.
Essential SOC
Up to 100 endpoints
38,000 ₺/month
Save 15% Excl. VAT / month
- 24/7 alert monitoring (EDR + firewall)
- 5 GB logs per day
- 30-minute response to critical alerts
- Monthly executive report
- E-mail and phone notification
- Threat hunting
- Incident response hours
Web Application Penetration Test
1 application, 2 roles
95,000 ₺
Excl. VAT
- 8–10 working days of testing
- Authenticated and unauthenticated testing
- CVSS-scored report with executive summary
- Retest included
- API and mobile
Business SOC
Up to 500 endpoints
95,000 ₺/month
Save 15% Excl. VAT / month
- 24/7 MDR: detection + response actions
- 40 GB logs per day, cloud and e-mail sources
- 15-minute response to critical alerts
- Monthly proactive threat hunting
- 40 hours of incident response a year
- Quarterly tabletop exercise
- Weekly vulnerability scan
Why Surnet
We do not sell products, we reduce risk
01
Threat hunting
We hunt proactively using MITRE ATT&CK techniques without waiting for alerts.
02
14-minute response
On critical alerts an analyst starts the first response in 14 minutes on average.
03
Plain-language reporting
Board-level risk summaries and technical details arrive together.
04
Regulation-focused
Scope aligned with KVKK, BDDK, EPDK, the Cybersecurity Law and ISO 27001 requirements.
05
Local data centres
Log and telemetry data is stored in data centres in Türkiye.
06
Certified team
38 specialists certified in OSCP, CISSP, GCFA, CEH and CISA.
Security cycle
Discovery, testing, monitoring and continuous improvement
- 01
Discovery and risk analysis
Asset inventory, attack surface and business-impact analysis.
- 02
Testing and validation
Vulnerability scanning, penetration testing and control validation.
- 03
Monitoring and response
24/7 SOC, detection rules and incident handling.
- 04
Continuous improvement
Quarterly risk reports and exercises to raise maturity.
Security leaders speak
The trust that remains after an incident
After moving to the SOC service our monthly false-alarm rate fell 70%. The reports can be used directly in BDDK audits and at board level.
During a ransomware incident the Surnet team was on site at midnight. They isolated the network and restored critical systems in nine hours; we lost no data.
We completed KVKK and ISO 27001 preparation in five months. Ece’s team translated between technical and legal language.
Organisations we protect
Monitored 24/7 in finance, healthcare and manufacturing
- Anadolu Finans Katılım
- Marmara Sağlık Grubu
- Ege Plastik
- Kervan Lojistik
- Poyraz Telekom
- Yaylacık Enerji
- Seyhan Perakende
- Çınar Eğitim Kurumları
- Vadi Sigorta
Research and templates
Whitepapers & Reports
Threat intelligence
Threat Insights & Blog
SOC & Incident ResponseTen Steps to Prepare for RansomwareIn ransomware attacks, preparation made before the event matters more than the attack itself. A checklist: backups, MFA, segmentation and exercises.
Compliance & RegulationKVKK Data Breach: What to Do in the First 72 Hours
SOC & Incident ResponseWhat Is a SOC? Build In-house or Buy as a Service?
Testing & VulnerabilitiesHow to Read a Penetration Test Report: From CVSS to a Remediation Plan
Suspect something? We are right here
For ransomware, account takeover or suspected data leaks call our 24/7 emergency response line.