We work with KVKK attorneys registered with the Ankara and Istanbul Bar Associations, TSE-certified penetration testers, ISO 27001 lead auditors, and data protection specialists. Certifications are genuine and verifiable, and every expert owns a clearly defined area of responsibility.
Legal, offensive security, and product engineering — all three under one roof.
We interpret KVKK Board decisions, draft formal legal notices, manage VERBİS registrations, audit ISO 27001 ISMS implementations, and work on GDPR contracts (DPAs, SCCs). This team builds the first line of legal defense for client organizations.
The logic is simple: Compliance comes before the fine.
Attorney registered with the Ankara Bar Association. Works on the legal architecture of data processing operations under KVKK, breach response, correspondence with the Turkish Data Protection Authority, and privacy notice / explicit consent documentation.
Prefers to build auditable compliance models by embedding legal requirements into operational processes.
Attorney registered with the Istanbul Bar Association. Focuses on GDPR engagements: EU data protection legislation, cross-border data transfers (DPAs, SCCs), and data flows within international group structures.
Interprets GDPR obligations on a risk basis and fits them into the company's daily operations; looks at concrete business impact rather than abstract clauses.
Ten years in cybersecurity, KVKK, and ISO 27001. Leads general management and business development at Nesil Teknoloji; advises on KVKK and GDPR engagements and conducts ISO 27001 and 27701 audits.
Holds CIPP/E, ISO 27001 Lead Auditor, ISO 27701 Lead Implementer, and CISM certifications, along with a CMB Information Systems Independent Audit License (No. 930873).
ISO 27001 Lead Auditor. Works on ISMS audits, certification processes, and risk management.
Builds client ISMS structures from scratch or aligns existing systems with the standard; prepares internal audit reports in the field.
Business Development Director at Nesil Teknoloji. Works on new business opportunities, enterprise client relationships, and the company's market positioning.
A long-time industry insider; works on enterprise sales, proposal management, and long-term client relationships.
Senior systems engineer. Works on IT infrastructure, network architecture, and Active Directory; enterprise system deployment and security hardening are his domain.
Supports the infrastructure side of both the internal team and client projects; the person who keeps the environment running.
We operate under TSE Class A penetration testing accreditation (TS 13638/T2, No. TSE-STF-065). Our OSCP, OSEP, and CRT certified experts deliver web, mobile, API, network, source code (SAST), and red team engagements across finance, energy, e-commerce, and government.
We prioritize findings not just by CVSS score, but by business impact. We follow the NIST SP 800-115, OWASP WSTG, and OSSTMM frameworks — and write reports in language the reader can act on.
Ten years of penetration testing. TSE Senior Penetration Testing Expert. Enterprise environments and critical infrastructure testing are his core focus.
Holds OSCP+, OSCP, CEH, and LPT certifications; works with methodological discipline in the field and writes audit-ready reports.
TSE-Certified Penetration Testing Expert. Internal network pentesting, Active Directory assessment, and infrastructure security are his main areas.
Works within the TS 13638 framework; analyzes internal attack surfaces hands-on and delivers findings in audit-ready reports.
Computer Engineering graduate of Hacettepe University. Leads the penetration testing and source code analysis (SAST) team. Works with the TS 13638, OWASP, and PTES frameworks.
Performs code security analysis with Fortify and SonarQube; frames findings through RCA and Secure SDLC so they close permanently.
OSCP-certified penetration tester. Works in offensive security with a focus on Active Directory and network attack scenarios.
Tests complex attack chains in the field; reports show how each finding was discovered and how to reproduce it.
Pentester working across web, API, and network. Deeply familiar with the OWASP Top 10, API security, Active Directory attacks, and red team scenarios.
Has delivered penetration tests across finance, energy, e-commerce, and government. Reports findings by business impact, not just technical score.
Cybersecurity analyst on the SOC side: threat detection, log analysis, and incident response.
Performs threat hunting on Splunk and works with the MITRE ATT&CK framework; doesn't just close alerts — digs into root causes.
Cybersecurity analyst. Works on threat detection, EDR log analysis, and incident response.
Operates at SOC Tier 2 in the field; runs proactive scanning and forensic work, not just reactive response.
Business development specialist at Nesil Teknoloji for eight years. Works on client relations, RFP / proposal management, and account management.
Long-standing point of contact for our enterprise clients; part of the company's institutional memory.
The engineering and growth force behind Cerezgo, Erişebilir, and nesil.ai. We turn the problems we see in consulting into SaaS products.
KVKK-compliant cookie consent management (CerezGo), İYS integration, and web accessibility — we build the products and run the operations across all three.
Senior software engineer on the .NET stack; microservice architecture, API design, and the database layer are his core responsibilities.
Works with Microsoft Certified .NET, Azure Developer, and PostgreSQL; the backbone of our code quality standards and internal review culture.
Senior software engineer. Works on the technical side of İYS (Türkiye's Commercial Message Management System) built under CerezGo.
Backend architecture, data flows, consent management, logging, and service scaling are his domain; runs production systems on Azure and Kubernetes.
Business development specialist. Works with clients on KVKK compliance engagements and across the Cerezgo product family.
Experienced in data protection, privacy management, and regulatory compliance; acts as the translator between the technical team and business units.
Positions Cerezgo's solutions around each organization's needs and runs client-focused business development. Works especially on KVKK-compliant cookie management and the enterprise integration of user consent flows.
Business development specialist at Cerezgo. Positions cookie management, user experience, and data security solutions across different industries.
Tracks markets and competitors; focuses on which industry the product fits and how it sells.
Senior business development specialist at Cerezgo. Works on growth strategy and high-profile client relationships.
Works on establishing Cerezgo both domestically and globally; matching the product with the right industry and the right use case is her main focus.
When choosing a cybersecurity vendor, you need to see the name behind the signature. This work is done by people in the field — not by an automated report.