Case Studies

What Passeca engagements actually deliver

Anonymised case studies across FinTech, e-commerce, and manufacturing — the problem, what Passeca did, and the measurable result.

Book a free consultation

These case studies show how Passeca engagements unfold across compliance, offensive security, and managed security. Each follows the same shape — the client's industry and problem, what Passeca did, and the measurable result. Clients are anonymised and quotes are included only with permission.

Success stories

Selected case studies

Three representative engagements across the industries and services Passeca serves. For sector-specific examples, see the industry pages.

Financial ServicesISO 27001 + SOC 2

ISO 27001 and SOC 2 in parallel for a scaling FinTech

A fast-growing DACH FinTech needed ISO 27001 and SOC 2 to win enterprise and banking customers. Passeca ran both programmes on a shared evidence base, certifying ISO 27001 and attesting SOC 2 Type II in one engagement.

First cycleISO 27001 certified

AttestedSOC 2 Type II

10 monthsTime to both

~70% sharedEvidence reuse

“Running ISO 27001 and SOC 2 on one evidence base was the right call — we got both certifications in a single programme instead of two separate projects. Passeca owned the whole thing end to end.”
— Matthias L., Head of Security, DACH FinTech

Client: A DACH FinTech, ~150 employeesISO 27001 Certification Consulting

E-commerce & RetailPCI DSS + Penetration Testing

PCI DSS scope reduction and penetration testing for an e-commerce platform

An e-commerce retailer faced a PCI DSS assessment across a sprawling cardholder data environment. Passeca reduced scope through segmentation, then ran the penetration testing the standard requires — cutting the assessed environment dramatically.

80%CDE scope reduction

100% before retestCritical findings closed

ValidatedPCI DSS

PassedPentest retest

“The scope reduction was the breakthrough — once we stopped trying to secure everything as if it touched card data, the compliance work became manageable and the security actually improved.”
— Sophie K., CTO, European e-commerce retailer

Client: A European e-commerce retailer, ~300 employeesPCI DSS Compliance Services

Manufacturing & OTSOC-as-a-Service + Ransomware Protection

24/7 SOC and anti-ransomware for a manufacturing OT environment

A German manufacturer with both IT and OT environments had no 24/7 monitoring and had survived a near-miss ransomware incident. Passeca stood up SOC-as-a-Service with Halcyon anti-ransomware and agentless OT deception.

Live24/7 coverage

AgentlessOT detection

< 15 minMTTD SLA

On trackNIS2 readiness

“For the first time we have detection across the production environment without touching the control systems. That was the piece we could never solve before.”
— Thomas W., IT Director, German manufacturer

Client: A German manufacturer, ~600 employeesSOC-as-a-Service

Note: client identities are anonymised. Quotes are published with the approval of the person quoted.

Your engagement next

Want a measurable result like these?

Tell Passeca your goal — a certification, a cleaner pentest, 24/7 detection — and we will scope an engagement with the metrics that prove it worked.

Book a free consultation Explore services