Cyber security · St.Gallen · Since 2005
Cyber security,
built to be used.
CyberTell for SMEs, companies, families and IT partners, plus focused security apps such as Leakhound and NIS2 Readiness Audit.
- CriticalCVE-2021-34527Print server, unpatched since 2021A known flaw in the print service. Anyone inside the company network can use it to take over the whole server.
- CriticalAdmin account: M. KellerLeft in 2019, login still activeWith this login you can still get in everywhere today, and nobody would notice.
- WarningWindows Server 2012 R2End of life since October 2023Microsoft no longer ships security updates. New flaws stay open forever.
- WarningPayroll software 3.2Last update 2014, vendor dissolvedNobody fixes bugs or flaws any more, yet it holds the payroll data of every employee.
- CriticalPassword on the screenadmin / 1234, unchanged for yearsAnyone walking past the desk gets into the payroll software. Default passwords are the first thing attackers try.
- WarningWindows 10No support since October 2025Microsoft no longer closes new flaws. The computer is still connected to the company network and the internet.
- WarningArchive drives 2011Customer data, unencrypted, never deletedPersonal data may only be kept as long as it is needed. If the drives go missing, that can be a reportable data breach.
- WarningIT documentationLast changed 2015In an emergency, current passwords, plans and contacts are missing. Recovery then takes days instead of hours.
- WarningBackupLast success 212 days agoIf the server fails or is encrypted by a blackmailer, seven months of work are gone.
- WarningmacOS 11 Big SurNo security updates since 2023New flaws in this version stay open. The Mac still opens mail and company files every day.
- WarningMacBook without FileVaultDisk not encryptedIf the laptop is lost or stolen, anyone can read every file on it, including customer data.
- CriticalNAS · 2016No security update since 2019All company files are on it, and known flaws stay open. Attackers search the internet for exactly these devices.
- CriticalNAS admin without 2FAPassword only, reachable from the internetOne leaked password is enough to read, delete or encrypt every file on the NAS.
- CriticalPHP2ShellCompany website on PHP without the fixThis flaw lets attackers run code on the web server without logging in, and it is already being exploited.
Our platform
CyberTell · cybertell.io
365 days of cyber security, in one platform.
CyberTell is our largest product and the only one that is a hosted platform rather than an app. It puts phishing simulation, awareness training, risk assessment, compliance, incident management and AI playbooks into a single application – for companies, for families, and for IT partners who look after both.
The idea behind it: for most Swiss SMEs and families, security tools are expensive, English-only and built for corporations. CyberTell gives a ten-person business and a family of five the same modules a large company gets – in a language that suits them, under Swiss law, hosted in Switzerland.
For companies
19 modules across risk & compliance, awareness, incident response and autonomous defence. A guided yearly cycle: assess in Q1, train in Q2,…
From CHF 20 / month · all modules included
For private users
12 protection modules against romance scams, phishing, crypto fraud, grandparent scams and fake shops – with chat simulations, 16 courses a…
CHF 3 per person · CHF 10 for five
For IT partners
White-label reselling with a multi-client dashboard, your own branding, one consolidated monthly invoice, a REST API and Slack webhooks – n…
30 % recurring margin per client
- Since 2005Independent Swiss studio
- One platformAwareness, compliance and incident management for SMEs, companies, families and IT partners
- Swiss hostingUnder Swiss law, hosted in Switzerland
- Swiss madeDesigned, built and supported in St.Gallen
Security & Compliance
Cyber security, made practical.
Five native apps that turn standards and good habits into clear next steps – from a guided self-assessment to two-minute awareness training.
- Guided audits for the Swiss ICT minimum standard, NIST CSF 2.0 and NIS2
- Plain-language tips and a client-ready PDF report
- Fully offline – no account, no server, no tracking
Security & Compliance
Cyber Security Awareness Fit
Spot the scam before it costs you.
Leakhound
Finds leaked secrets on your Mac — before someone else does.
Cyber Maturity Audit
NIST CSF 2.0, measured.
IKT-Minimalstandard
Assess it. Understand it. Implement it.
KMU Cyber-Audit
The small business security check.
NIS2 Readiness Audit
Ready before your customers ask.
Questions
Frequently asked questions.
What is the difference between a pentest and an audit?
A pentest attacks your systems and shows which flaws can actually be exploited. An audit checks whether measures and processes meet a standard such as the Swiss ICT Minimum Standard or NIS2. Neither replaces the other: an audit can go well even though an application is vulnerable.
Can you support us with the ICT Minimum Standard or NIS2?
Yes. We advise you on priorities, concepts and implementation. For a first assessment there are our apps IKT-Minimalstandard and NIS2 Readiness Audit. A self-assessment does not replace a formal audit or certification, though.
How does CyberTell differ from your security apps?
CyberTell is a hosted platform with accounts and dashboards: phishing simulation, awareness training, risk assessment, compliance and incident management in one place. The security apps run locally on your devices and each solve one specific task, such as a self-assessment or finding exposed secrets.
Which audit app is right for us?
KMU Cyber-Audit is made for SMEs, NIS2 Readiness Audit for companies within the scope of the EU directive. IKT-Minimalstandard follows the Swiss federal standard, Cyber Maturity Audit follows NIST CSF 2.0. All four are self-assessments and work offline, without an account.
What does the free version of the audit apps include?
A fully usable version with part of the catalogue: 20 of 108 measures in IKT-Minimalstandard, 21 of 27 requirements in KMU Cyber-Audit, 24 of 29 checkpoints in NIS2 Readiness Audit and 24 of 106 subcategories in Cyber Maturity Audit.
Which languages are the security apps available in?
The four audit apps are available in German, French, Italian and English, plus an unofficial Romansh translation. Cyber Security Awareness Fit is fully available in German, French, Italian, English, Spanish and Portuguese. Leakhound is available in 34 languages.
Does one purchase cover several devices?
For the audit apps and Cyber Security Awareness Fit, one purchase covers iPhone, iPad and Mac. A Pro license for Leakhound or ProxyButler covers up to three Macs. You manage the devices in your account.
What data do your apps collect?
We use neither advertising trackers nor third-party analytics services. IKT-Minimalstandard and Cyber Security Awareness Fit make no network requests at all. Leakhound and ProxyButler transmit only the data needed for the license check, never scan results or captured traffic. Other apps may collect anonymous usage statistics and crash reports. The details are in the privacy policy.
How do I cancel a subscription or get a refund?
Purchases from the App Store or Google Play are managed there, and the platform decides on refunds. You cancel Leakhound and ProxyButler subscriptions in your account; cancellation takes effect at the end of the paid period. Within 14 days of your first purchase we refund the amount on request. The details are in the terms of use.
How do I reach support?
Write to info@treeinspired.com, in German or English. We reply within two working days.
Blog