# TUGAY Siber Savunma Sistemleri A.Ş. > TUGAY is a Türkiye-based cybersecurity company headquartered at Teknopark İstanbul (Pendik). It provides TSE-certified penetration testing, source code analysis, WAF, DevSecOps, SOC 24/7 monitoring, and cybersecurity training. Serving 400+ clients across 10 countries. > TUGAY, Teknopark İstanbul (Pendik) merkezli bir siber güvenlik şirketidir. TSE onaylı sızma testi, kaynak kod analizi, WAF, DevSecOps, SOC 7/24 izleme ve siber güvenlik eğitimleri sunmaktadır. 10 ülkede 400'den fazla müşteriye hizmet vermektedir. ## Penetration Testing / Sızma Testi - [Sızma Testi — Genel Bakış](https://tugay.com.tr/sizma-testi-pentest/): TSE-certified network, web, mobile, embedded system and social engineering penetration tests. - [Ağ & Network Güvenliği](https://tugay.com.tr/ag-ve-network-guvenligi/): Network and infrastructure penetration testing. - [Web & Veritabanı Uygulamaları](https://tugay.com.tr/web-ve-veritabani-uygulamalari/): Web application and database security testing. - [Mobil Uygulamalar](https://tugay.com.tr/mobil-uygulamalar/): Mobile application security testing (iOS, Android). - [Sosyal Mühendislik Testi](https://tugay.com.tr/sosyal-muhendislik-testi/): Social engineering and phishing simulation tests. - [Gömülü Sistemler](https://tugay.com.tr/gomulu-sistemler/): Embedded system and IoT security testing. - [DDoS / Yük Testi](https://tugay.com.tr/ddos-yuk-testi/): DDoS resilience and load testing. ## Code Analysis / Kod Analizi - [Kaynak Kod Analizi](https://tugay.com.tr/kaynak-kod-analizi/): Manual and automated source code security review. - [EALx Değerlendirme](https://tugay.com.tr/ealx/): Common Criteria EALx security evaluation. - [SAST / DAST](https://tugay.com.tr/sast-dast-statik-dinamik-kod-analizi/): Static and dynamic application security testing. - [Otomatik Regresyon & Güvenlik Testi](https://tugay.com.tr/otomatik-regresyon-ve-guvenlik-testi/): Automated regression and continuous security testing. ## Secure Development / Güvenli Geliştirme - [S-SDLC](https://tugay.com.tr/ssdlc/): Secure Software Development Life Cycle consulting. - [DevSecOps](https://tugay.com.tr/devsecops/): Integrating security into CI/CD pipelines. - [SOC 7/24](https://tugay.com.tr/noc-soc-724-izleme-guvenlik/): 24/7 network and security operations center monitoring. - [WAF](https://tugay.com.tr/waf-web-application-firewall/): Web Application Firewall deployment and management. ## Certification Consulting / Sertifikasyon Danışmanlığı - [ISO 27001 & ISO 27701](https://tugay.com.tr/iso-27001-ve-iso-27701/): Information security and privacy management certification. - [IEC 62304](https://tugay.com.tr/iec-62304/): Medical device software lifecycle standard. - [SPICE 15504](https://tugay.com.tr/spice-15504/): Software process assessment standard. - [KVKK / GDPR](https://tugay.com.tr/kvkk-and-gdpr/): Turkish KVKK and EU GDPR compliance consulting. ## Training / Eğitimler - [Beyaz Şapkalı Hacker (Ethical Hacking)](https://tugay.com.tr/beyaz-sapkali-hacker/): Hands-on ethical hacking training. - [Güvenli Yazılım Geliştirme](https://tugay.com.tr/guvenli-yazilim-gelistirme-ve-kod-analizi/): Secure coding and code analysis training for developers. - [Güvenli Yazılım Döngüsü](https://tugay.com.tr/guvenli-yazilim-dongusu/): Secure SDLC process training. - [AI / YZ Güvenlik ve Mevzuat](https://tugay.com.tr/ai-yz-guvenlik-ve-mevzuat/): AI security, risks and regulatory compliance training. - [Kurumsal Farkındalık Eğitimleri](https://tugay.com.tr/kurumsal-farkindalik-egitimleri/): Corporate security awareness programs. ## Knowledge Base / Bilgi Bankası - [Bilgi Bankası Ana Sayfa](https://tugay.com.tr/bilgi-bankasi/): Index of security guides and articles. - [TSE Onaylı Sızma Testi](https://tugay.com.tr/bilgi-bankasi/tse-onayli-sizma-testi-pentest/): What TSE-certified penetration testing means and why it matters. - [ISO 27001 & Sızma Testi](https://tugay.com.tr/bilgi-bankasi/iso-27001-sizma-testi/): Penetration testing requirements under ISO 27001. - [KVKK/GDPR & Sızma Testi](https://tugay.com.tr/bilgi-bankasi/kvkk-gdpr-sizma-testi/): Pentest obligations under KVKK and GDPR. - [Kamu Kurumları Sızma Testi](https://tugay.com.tr/bilgi-bankasi/kamu-kurumlari-sizma-testi/): Penetration testing for government institutions. - [Belediyeler Sızma Testi](https://tugay.com.tr/bilgi-bankasi/belediyeler-sizma-testi/): Penetration testing for municipalities. - [Sağlık / MDR Sızma Testi](https://tugay.com.tr/bilgi-bankasi/saglik-mdr-sizma-testi/): Healthcare and medical device security testing. - [SaaS Sızma Testi](https://tugay.com.tr/bilgi-bankasi/saas-sizma-testi/): Penetration testing for SaaS products. - [İYS Sızma Testi](https://tugay.com.tr/bilgi-bankasi/iys-sizma-testi/): Commercial messaging system (İYS) security. - [TURQUALITY Sızma Testi](https://tugay.com.tr/bilgi-bankasi/turquality-sizma-testi/): Security testing requirements for TURQUALITY program. - [White-Box Sızma Testi](https://tugay.com.tr/bilgi-bankasi/white-box-sizma-testi/): White-box (crystal-box) penetration testing methodology. - [Phishing / Oltalama](https://tugay.com.tr/bilgi-bankasi/phishing-oltalama/): Phishing attack types, detection and defense. - [Yapay Zeka Uygulama Güvenliği](https://tugay.com.tr/bilgi-bankasi/yapay-zeka-uygulama-guvenligi/): Security of AI/ML applications and models. - [Yapay Zeka İş Akışları Güvenliği](https://tugay.com.tr/bilgi-bankasi/yapay-zeka-is-akislari-guvenligi/): Security of AI agent workflows and pipelines. - [ISO 13485 / IEC 62304 Güvenli Yazılım](https://tugay.com.tr/bilgi-bankasi/iso-13485-iec-62304-guvenli-yazilim/): Secure software for medical devices under ISO 13485 and IEC 62304. ## Corporate / Kurumsal - [TUGAY Kimdir?](https://tugay.com.tr/tugay-kimdir/): Company history, mission and team. - [Sertifikalar](https://tugay.com.tr/sertifikalar/): CEH, OSCP, TSE and other certifications held by TUGAY. - [Referanslar](https://tugay.com.tr/referanslar/): Client references across government, healthcare, finance and technology sectors. - [Partnerler](https://tugay.com.tr/partnerler/): Technology and channel partners. - [İnsan Kaynakları](https://tugay.com.tr/insan-kaynaklari/): Career opportunities and job applications. - [İletişim](https://tugay.com.tr/iletisim/): Contact information — Teknopark İstanbul, Pendik, İstanbul. Phone: +90 216 606 44 77. Email: bilgi@tugay.com.tr ## English Version Full English site available at https://tugay.com.tr/en/ All service, training and knowledge base pages have English counterparts under /en/.