We break into your systems
so criminals can't.
ClearWebCanvas is a cybersecurity studio based in Râmnicu Vâlcea, Romania. We run real penetration tests, audits, and incident response for businesses that would rather find their gaps themselves.
All engagements delivered digitally · Based in Râmnicu Vâlcea, Romania
What we test, fix, and defend
Six core services, each one built to answer a specific question about how exposed your business really is.
Penetration Testing — Web & Network
We simulate real attacks against your websites, APIs, and internal network to find exploitable weaknesses before someone else does. Every engagement ends with a plain-language report your team can actually act on.
Vulnerability Assessment & Management
Continuous scanning and manual triage of your infrastructure, ranked by real-world risk instead of raw scanner output. You get a prioritized fix list, not a 200-page PDF nobody reads.
Security Audits & Compliance (GDPR, ISO 27001)
We map your current setup against GDPR and ISO 27001 requirements, flag the gaps, and hand you a remediation roadmap your auditor will actually recognize.
Incident Response & Digital Forensics
If something's already gone wrong, we help you contain it, work out what happened, and preserve the evidence properly — then help you close the door it came through.
Cloud Security Hardening
We review your AWS, Azure, or Google Cloud setup for misconfigurations, excess permissions, and exposed storage — the mistakes behind most real-world cloud breaches.
Security Awareness Training
Practical, jargon-free training and simulated phishing campaigns that actually change how your team behaves, instead of a slideshow they click through once a year.
Pricing & packages
Three fixed packages. No hidden scoping calls to find out what something "really" costs.
A focused external scan and manual review for small sites and apps that need a fast, honest read on their exposure.
- External vulnerability scan (up to 3 assets)
- Manual verification of critical findings
- Plain-language risk report
- Prioritized fix list
- 30-minute walkthrough call
- Delivered within 5 business days
Our most-booked package: a hands-on penetration test built for growing businesses that handle customer data.
- Everything in Perimeter Check
- Manual penetration test (web or network)
- Exploitability proof for critical issues
- Free retest of fixed issues
- GDPR quick-check summary
- Delivered within 7-10 business days
A full-scope audit for businesses that need a defensible security posture for clients, investors, or auditors.
- Everything in Shield Protocol
- Combined web + network penetration test
- ISO 27001-aligned gap assessment
- Executive summary for leadership
- Two rounds of retesting
- 60-minute findings walkthrough
Additional services
Smaller, standalone checks you can order individually — no package required.
Password Policy Review
€10We check one system's password rules against current best practice and tell you exactly what to change.
Order nowPhishing Email Analysis
€20Send us one suspicious email — we tell you if it's dangerous and what it was trying to do.
Order nowFirewall Rule Review
€30A sanity-check of up to 10 firewall rules for gaps, conflicts, or forgotten exceptions.
Order nowSSL/TLS Configuration Check
€40We verify your certificate and cipher setup isn't quietly leaving you exposed.
Order nowWebsite Malware Scan
€50A full scan of one website with a written summary of anything we find.
Order nowWi-Fi Network Security Check
€75On-site or remote review of your wireless network setup and access controls.
Order nowBasic Vulnerability Scan
€100Automated scan of one domain, plus a manual review of what actually matters.
Order nowSecurity Awareness Micro-Session
€150One live session for up to 10 staff — practical, not a slideshow they'll forget by lunch.
Order nowGDPR Data-Flow Mini Audit
€200We map how personal data moves through one core system and flag the risk points.
Order nowCloud Storage Security Review
€300A permissions and exposure check for one cloud storage provider.
Order nowIncident Response Readiness Check
€400We pressure-test your team's response plan before you actually need it.
Order nowFrom first call to closed findings
Four steps, no surprises in between.
Scoping call
We talk through what you're protecting, who might target it, and what "done" looks like. Usually 20-30 minutes.
Testing & assessment
Our team runs the agreed testing against your systems, working the same way a real attacker would. Most engagements take 5-10 business days.
Report & walkthrough
You get a written report ranked by real risk, plus a call where we walk through every finding in plain language.
Fix verification
Once your team has patched the critical issues, we retest them at no extra cost and confirm they're actually closed.
7-day satisfaction guarantee
Not happy with what we delivered? Tell us within 7 days and we'll make it right — see the full terms in our Refund Policy.
ClearWebCanvas vs. handling it in-house vs. a big vendor
A quick, honest comparison — no named competitors, just the usual alternatives.
Before you ask
The questions we get on almost every first call.
Our packages start at a fixed €150, €300, or €400, and smaller one-off checks are priced individually — see the full breakdown on our Services page.
Most penetration tests and audits are delivered in 5-10 business days from the scoping call, depending on scope.
Access to the systems in scope, a signed authorization letter, and a short scoping call — that's genuinely it.
We flag it immediately, not just in the final report, so you can start fixing it the same day.
Every package includes at least one free retest once you've patched what we flagged, so you're not paying twice to confirm a fix worked.
We offer a 7-day satisfaction guarantee — read the full terms in our Refund Policy.
The people behind the reports
Râmnicu Vâlcea is better known abroad for the wrong reasons in cybersecurity circles — we'd rather be known for the audits that hold up.
Founded
Andrei starts ClearWebCanvas out of Râmnicu Vâlcea, working solo with a handful of local businesses that needed an honest security review.
First cross-border clients
Word spreads and the studio starts testing systems for companies outside Romania, mostly through referrals.
Compliance focus added
GDPR and ISO 27001 gap assessments become a core service as more clients need audit-ready documentation, not just a pentest report.
Today
A small, senior team testing and hardening systems for clients across multiple countries — still based in Râmnicu Vâlcea.
Who you'll actually work with
No account managers standing between you and the person doing the testing.
Andrei Gabriel Zaulet
“I still read every report before it goes out.”
Elena Marinescu
“I make sure the paperwork holds up as well as the fix.”
Radu Constantinescu
“Most breaches are boring mistakes. I find them fast.”
What it's actually like to work with us
“ClearWebCanvas found a misconfigured storage bucket our own IT team had missed for two years. Fixed within a week of the report.”
“The report was the first security document our board actually understood.”
“Retest was included, no arguing about scope creep.”
“Fast, direct, no fluff. Exactly what a small business needs.”