# SIGILO

> SIGILO is a cybersecurity consultancy keeping Japan safe — specializing in vulnerability intelligence, attack-surface exposure management, and remediation engineering. We help organizations identify hidden vulnerabilities, understand real-world exposure, prioritize threats, and remediate weaknesses before attackers exploit them. Our methodology: Discover → Correlate → Prioritize → Remediate → Verify.

## Services
- [Attack Surface Intelligence](https://sigil-o.com/services/attack-surface-intelligence/): Discover and validate every internet-facing asset you own — domains, cloud assets, exposed APIs, and services.
- [Vulnerability Intelligence](https://sigil-o.com/services/vulnerability-intelligence/): Normalize NVD, CISA KEV, EPSS, OSV.dev, and vendor data; match it to the systems you actually run.
- [Exposure Prioritization](https://sigil-o.com/services/exposure-prioritization/): Rank findings by real-world risk — severity, exploitability, exposure, reachability, and business impact.
- [Remediation Engineering](https://sigil-o.com/services/remediation-engineering/): Patch, upgrade, and configuration fixes engineered for production safety and verified before closure.
- [Cloud & Infrastructure Security](https://sigil-o.com/services/cloud-infrastructure-security/): AWS, IAM, network exposure, Kubernetes, containers, CI/CD, and secrets handling.
- [AI & Application Security](https://sigil-o.com/services/ai-application-security/): LLM architecture, prompt-injection, RAG security, agent permissions, and API security.

## Company
- [Home](https://sigil-o.com/): Know what is exposed. Fix what matters.
- [How We Work](https://sigil-o.com/how-we-work/): The SIGILO methodology — Discover → Correlate → Prioritize → Remediate → Verify.
- [Industries](https://sigil-o.com/industries/): Technology & SaaS, financial services, manufacturing, enterprise IT, AI and cloud-native companies.
- [About](https://sigil-o.com/about/): Mission, operating philosophy, and technical approach.
- [Contact](https://sigil-o.com/contact/): B2B inquiries about your security exposure.
- [Privacy](https://sigil-o.com/privacy/): How we handle information collected through this website.

## Insights
- [Why CVSS Alone Is Not Enough for Vulnerability Prioritization](https://sigil-o.com/insights/why-cvss-is-not-enough/): Severity (CVSS) vs probability (EPSS) vs confirmed exploitation (CISA KEV).

## Localized versions
- [日本語 (Japanese)](https://sigil-o.com/ja/): SIGILO — エクスポージャー・インテリジェンス & レスポンス。