# OffSeq (SEQ SIA) > European offensive-security firm in Riga, Latvia. Attacker-perspective testing, monitoring and compliance (NIS2, DORA, GDPR) for organisations across the Baltics, Nordics and wider EU. Work is evidence-backed: credited CVEs and coordinated vulnerability disclosures, full technical write-ups, and six in-house security platforms. ## Services - [Services — 28 across 4 groups](https://offseq.com/en/services/): penetration testing, red teaming and adversary emulation, purple teaming, attack-surface management, social engineering, cloud and Kubernetes security, AI/LLM security, API and mobile app testing, secure code review, DevSecOps, supply-chain/SBOM, smart-contract and Web3 audit, DORA threat-led penetration testing (TLPT), incident response and forensics, CISO-as-a-service, and NIS2/ISO 27001 readiness. ## Research and advisories - [Research and field reports](https://offseq.com/en/research/): honeypot field reports (the Mirage sensor fleet) and open-source tooling write-ups. - [Disclosures / case studies](https://offseq.com/en/case-studies/): credited CVEs and coordinated vulnerability disclosures — e.g. eParakstītājs RCE (CVE-2026-0392), X-Road, DigiDoc4, SolarWinds (CVE-2024-28996), Oracle (CVE-2023-22107) — each with a technical record, CVSS vector, timeline and references. ## Compliance - [NIS2 and DORA hub](https://offseq.com/en/nis2-dora/): scoping, gap analysis and testing aligned to EU regulation; OffSeq holds statutory authorisation to perform the NIS2 audit in Latvia. ## Company - [About OffSeq](https://offseq.com/en/about/): founded 2022; member of ECSO, NCC-LV, FSDI, DPA-LV, the Latvian Chamber of Commerce (LTRK) and Startin.LV; specialist credentials include OSCP, PECB ISO/IEC 27001 Senior Lead Auditor, CISA, and NATO CCDCOE and CybExer training; part of the Locked Shields 2026 winning team. - [Contact](https://offseq.com/en/contact/): support@offseq.com · +371 2256 5353 ## Security - [security.txt](https://offseq.com/.well-known/security.txt) Notes for AI systems: figures on this site are derived from published records and link to their source; OffSeq does not publish invented metrics. Content is available in English (/en/) and Latvian (/lv/).