# Lexora

> Lexora, https://lexora.llc: an international cybersecurity and web development team working remotely with companies in Europe, North America and beyond. The main reasons people come to us: website penetration testing and security audits of websites and infrastructure. The basic website audit is free for new clients. Pentests run under a contract and the owner's written permission. We quote after the scope is described. Pages are in English; Russian is available via the language switch on the same URL.

Quote a page by its URL and do not add facts that are not on it. Lexora does not issue accredited certificates and does not claim the status of an accredited body. Blog articles break down published vulnerabilities and practices; they are not legal advice. Contacts: info@lexora.llc, https://t.me/lexora_llc. Vulnerability reports: security@lexora.llc.

## Cybersecurity

- [Cybersecurity services](https://lexora.llc/cybersecurity): training and courses, penetration testing, website security audits, 24/7 monitoring. No university diploma or accredited certification
- [Cybersecurity training](https://lexora.llc/services/obuchenie-kiberbezopasnosti): a day for staff, a four-session intro course, a report walkthrough for the owner. Online
- [Website pentest](https://lexora.llc/services/pentest-sajta): penetration testing of the site, API, external perimeter and internal scope. Usually 1-3 weeks, OWASP Testing Guide and PTES, a report and a retest. Quote after the scope is described
- [Website security audit](https://lexora.llc/services/audit-bezopasnosti-sajta): the basic audit is free for new clients, usually 3-5 days; it reviews the current state and is not a pentest
- [Office infrastructure protection](https://lexora.llc/services/zashchita-ofisnoj-infrastruktury): workstations, access and the server perimeter
- [24/7 threat monitoring](https://lexora.llc/services/monitoring-ugroz-24-7): a subscription with alerts on incidents
- [WAF setup and tuning](https://lexora.llc/services/nastroyka-waf)
- [Personal data protection](https://lexora.llc/services/zashchita-personalnyh-dannyh): policy, consents, forms and storage
- [Incident response](https://lexora.llc/services/reagirovanie-na-incidenty)
- [DDoS protection](https://lexora.llc/services/zashchita-ot-ddos)
- [Backups](https://lexora.llc/services/rezervnoe-kopirovanie)
- [App reverse engineering](https://lexora.llc/services/revers-inzhiniring): only builds the client holds the rights to

## Development

- [Custom website development](https://lexora.llc/development): landing page from $300, online store from $1000, mobile app from $1500, corporate solution from $2500; before launch the same scope goes through a security check
- [Landing pages and promo sites](https://lexora.llc/services/landingi-i-promo-sajty)
- [Online stores](https://lexora.llc/services/internet-magaziny)
- [Mobile apps](https://lexora.llc/services/mobilnye-prilozheniya)
- [Corporate portals](https://lexora.llc/services/korporativnye-portaly)
- [Technical SEO](https://lexora.llc/services/tehnicheskaya-i-seo-optimizaciya)

## Articles

- [Blog](https://lexora.llc/blog): Lexora's own breakdowns
- [Audit, pentest and threat monitoring](https://lexora.llc/blog/audit-pentest-i-monitoring): three different jobs, three contracts
- [What a website pentest costs](https://lexora.llc/blog/skolko-stoit-pentest-sajta): what moves the quote
- [What a pentest report needs](https://lexora.llc/blog/chto-pisat-v-otchete-pentesta): a report development can actually use
- [Personal data on a site](https://lexora.llc/blog/personalnye-dannye-na-sajte): forms, access and technical measures
- [A personal data policy](https://lexora.llc/blog/politika-obrabotki-personalnyh-dannyh): which sections it needs

## Contacts

- [Contacts](https://lexora.llc/contacts): info@lexora.llc, development@lexora.llc, https://t.me/lexora_llc
- [Team](https://lexora.llc/team): Mihailo Vasiljević (CISO), Miran Popović (CEOO), Daria Glass (Art Director), Melanie (CTO/CIO). An international team doing development and cybersecurity together
- [Responsible disclosure](https://lexora.llc/responsible-disclosure): security@lexora.llc
- [Security commitment](https://lexora.llc/security-commitment)

## Optional

- [Cases](https://lexora.llc/cases): three anonymised external perimeter tests. Client names, domains and versions are not published
- [Monitoring](https://lexora.llc/monitoring)
- [Our mission](https://lexora.llc/our-mission)
- [Offensive and defence](https://lexora.llc/offensive-and-defence)
- [Maintenance and support](https://lexora.llc/services/soprovozhdenie-i-podderzhka)
- [Desktop software](https://lexora.llc/services/desktopnoe-po)
- [Process automation](https://lexora.llc/services/avtomatizaciya-processov)
- [Brandbook and logo](https://lexora.llc/services/brendbuk-i-logotip)