Munin is P3 Consulting's on-premise network audit service: over 7 calendar days, an agent installed in your DMZ collects data passively and produces an archivable report with a full inventory, NIS2 mapping and a security posture assessment. No data leaves the client's infrastructure.
Munin is the entry door to the P3 portfolio. 85% of structured clients enter here. Technically serious: an on-prem agent, zero invasive scans on your systems. Commercially light: a contained entry price, an archivable report, no strings attached.
We offer it to every prospect on every channel because it's the snapshot a real conversation grows from. Even if you buy nothing else, you take the report away with you.
No "kickoff and then we'll see". Every day has a verifiable outcome, a partial deliverable and the client contact's sign-off.
No consultation portal that expires. No "come back to us for the detail". Static files, archivable, shareable with the board and the auditor.
The full technical report. Typeset, archivable. Language fit for CTOs and CISOs without being unreadable for those outside the field.
The one-pager for the board of directors. Five numbers, three charts, two recommendations. Non-technical language, clear and formal.
The raw list of findings, in a format your IT team can work with. Jira, ServiceNow, Excel compatible. Each row with owner, severity, due date.
Inventory of critical ICT suppliers with exposure, NIS2/DORA classification, expiring contracts. Usable directly by procurement.
No. Zero packets sent to your systems. Munin uses passive reading of network flows and OSINT research on externally exposed systems. An active penetration test is a different matter, contracted separately with dedicated intervention windows.
Yes. The on-prem agent lives in your DMZ. Aggregated data ends up in Frankfurt and Amsterdam datacentres. No US sub-processor, no BAA with US AWS/Azure/GCP. The full list of sub-processors is in the DPA you sign at kickoff: all EU, all audit-ready.
Yes, precisely: every finding is mapped to the corresponding NIS2 article (mainly art. 21 technical measures and art. 23 incident reporting). For the AI Act side we run a separate dedicated audit: standard Munin is about network and security, not AI governance.
It depends on the report. In most cases it identifies gaps that close with P3 portfolio products, but the report is yours and you can take it wherever you want. 85% of clients come back anyway within 18 months.
Fill in the form. We reply the same day or within 24 working hours with two slot options and the standard NDA. No 45-minute discovery call just to find out whether it's worth it.
"Never seen an audit that's technically serious and commercially honest in the same document. The mayor read it in 5 minutes, the CISO in 5 hours. Everyone happy."