Tolga Erdemli
Co-founder · CISO
About Us
Measurable cyber resilience
A vendor-neutral cyber security firm delivering 24/7 SOC, penetration testing, incident response and KVKK compliance since 2014.
Surnet Information Security was founded in İstanbul in 2014 by a group of penetration testers and SOC analysts. Our starting point was simple: organisations invest in security products, but nobody measures whether these products actually protect. Today we close that gap with 38 certified experts, a 24/7 SOC and more than 180 corporate clients.
Our approach
We treat security not as a product list but as a measurable risk programme. First we map your attack surface and business-critical assets, then prioritise vulnerabilities by business impact. Our SOC service completes monitoring, detection and response, and quarterly reports show the rise in maturity.
Our principles
- Vendor neutrality: we have no goal of selling a particular product; we use the available tools that best fit your needs.
- Ethics and confidentiality: every employee signs a confidentiality undertaking; tests never start without written authorisation.
- Local data: log and telemetry data is stored in data centres in Türkiye.
- Transparency: findings, evidence and remediation advice are shared in full.
Our certifications
We hold ISO 27001, ISO 22301 and ISO 9001 certified management systems. Our experts hold OSCP, CISSP, GCFA, CEH, CISA and CCSP certificates. Our offices are in İstanbul, Ankara and İzmir.
180+Organisations monitored
14 minAverage first response time
2600+Penetration tests delivered
38OSCP / CISSP / CEH certified experts
Why choose us?
Threat hunting
We hunt proactively using MITRE ATT&CK techniques without waiting for alerts.
14-minute response
On critical alerts an analyst starts the first response in 14 minutes on average.
Plain-language reporting
Board-level risk summaries and technical details arrive together.
Regulation-focused
Scope aligned with KVKK, BDDK, EPDK, the Cybersecurity Law and ISO 27001 requirements.
Local data centres
Log and telemetry data is stored in data centres in Türkiye.
Certified team
38 specialists certified in OSCP, CISSP, GCFA, CEH and CISA.
Our Experts
Dr. Sevgi Ünlüer
Director of Threat Intelligence
Kaan Yıldırımer
Head of Penetration Testing
Deniz Aksoyan
SOC Manager
Suspect something? We are right here
For ransomware, account takeover or suspected data leaks call our 24/7 emergency response line.